VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20260330

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.54 2.55 2.57 T:aes128gcmv1 2.81 2.82 2.84 aes256gcmv1 8.78 8.81 8.84 ascon128av12 12.82 12.85 12.87 ascon80pqv12 12.84 12.86 12.88 ascon128v12 16.52 16.60 16.64 T:xoodyakround3 16.81 16.83 16.86 ascon128abi32v12 22.83 22.85 22.89 T:schwaemm256128v2 24.13 24.22 24.42 ascon128bi32v12 27.27 27.29 27.32 T:grain128aeadv2 30.22 30.26 30.32 T:schwaemm192192v2 32.54 32.59 32.62 T:schwaemm128128v2 33.15 33.17 33.20 T:schwaemm256256v2 35.98 36.05 36.11 T:giftcofb128v1 36.23 36.28 36.31 romulusn 50.05 50.15 50.25 T:isapa128v20 51.48 51.53 51.56 T:tinyjambu128v2 55.06 55.09 55.14 T:isapa128av20 59.50 59.56 59.64 romulusm 61.59 61.65 61.67 T:tinyjambu192v2 66.97 66.99 67.05 T:tinyjambu256v2 88.64 88.79 89.99 T:isapk128av20 117.98 118.43 119.36 T:isapk128v20 127.93 128.02 128.11 romulust 170.07 170.26 170.36 T:elephant200v2 177.03 178.38 183.16 T:isapxv20 8977.60 9020.92 9026.21 T:elephant176v2 9728.57 9733.17 9738.41 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.10 3.11 3.12 T:aes128gcmv1 3.75 3.76 3.77 aes256gcmv1 8.69 8.71 8.71 ascon128av12 12.79 12.80 12.83 ascon128v12 12.83 12.89 12.92 ascon80pqv12 16.34 16.37 16.43 T:xoodyakround3 16.75 16.76 16.79 ascon128abi32v12 22.84 22.87 22.90 T:schwaemm256128v2 24.14 24.16 24.20 ascon128bi32v12 28.45 28.57 28.60 T:grain128aeadv2 30.12 30.18 30.22 T:schwaemm192192v2 32.59 32.62 32.67 T:schwaemm128128v2 33.16 33.19 33.26 T:schwaemm256256v2 35.93 35.98 36.01 T:giftcofb128v1 36.33 36.36 36.40 romulusn 49.75 49.98 50.25 T:isapa128v20 51.67 51.71 51.76 T:tinyjambu128v2 54.99 55.09 55.19 T:isapa128av20 59.53 59.61 59.68 romulusm 62.13 62.18 62.22 T:tinyjambu192v2 67.10 67.13 67.18 T:tinyjambu256v2 88.55 88.69 88.92 T:isapk128av20 117.89 118.44 119.01 T:isapk128v20 127.92 128.03 128.18 romulust 170.10 170.29 170.41 T:elephant200v2 176.87 177.85 178.93 T:isapxv20 8977.51 9021.43 9025.64 T:elephant176v2 9728.30 9732.56 9735.28 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.10 3.11 3.12 T:aes128gcmv1 3.76 3.77 3.78 aes256gcmv1 8.69 8.70 8.72 ascon128av12 12.79 12.80 12.84 ascon128v12 12.85 12.90 12.93 ascon80pqv12 16.41 16.44 16.49 T:xoodyakround3 16.74 16.76 16.80 ascon128abi32v12 22.84 22.87 22.90 T:schwaemm256128v2 24.14 24.17 24.20 ascon128bi32v12 24.82 24.87 24.91 T:isapa128v20 28.45 28.56 28.59 T:grain128aeadv2 30.13 30.19 30.22 T:schwaemm192192v2 32.57 32.60 32.64 T:schwaemm128128v2 33.15 33.18 33.21 T:schwaemm256256v2 35.93 35.99 36.01 T:giftcofb128v1 36.30 36.34 36.39 romulusn 37.21 37.24 37.25 T:isapa128av20 43.98 44.04 44.17 romulust 51.67 51.74 51.78 T:tinyjambu128v2 58.30 58.37 58.61 T:isapk128av20 59.52 59.59 59.67 romulusm 62.14 62.17 62.21 T:tinyjambu192v2 67.10 67.15 67.19 T:tinyjambu256v2 73.33 73.40 73.49 T:isapk128v20 103.99 104.40 105.14 T:isapxv20 170.07 170.26 170.38 T:elephant200v2 8976.69 9020.40 9025.89 T:elephant176v2 9727.95 9731.65 9735.91 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.17 2.18 2.19 T:aes128gcmv1 2.30 2.31 2.32 aes256gcmv1 8.70 8.72 8.74 ascon128av12 12.53 12.58 12.61 T:xoodyakround3 12.70 12.72 12.74 ascon80pqv12 12.74 12.75 12.77 ascon128v12 16.72 16.74 16.76 ascon128abi32v12 22.68 22.70 22.72 T:schwaemm256128v2 24.18 24.30 24.44 ascon128bi32v12 27.38 27.40 27.42 T:grain128aeadv2 29.72 29.75 29.79 romulusn 30.04 30.07 30.11 T:schwaemm192192v2 32.40 32.42 32.45 T:schwaemm128128v2 33.02 33.04 33.06 T:schwaemm256256v2 36.11 36.14 36.18 T:giftcofb128v1 37.48 37.58 37.84 T:isapa128v20 41.41 41.44 41.51 romulusm 42.63 42.65 42.70 T:tinyjambu128v2 46.18 46.22 46.26 T:isapa128av20 47.29 47.33 47.36 T:tinyjambu192v2 49.72 49.76 49.90 T:tinyjambu256v2 73.53 73.67 74.07 T:isapk128av20 85.77 85.80 85.84 romulust 95.90 96.05 96.67 T:isapk128v20 126.98 127.09 127.19 T:elephant200v2 140.73 141.73 144.12 T:isapxv20 6706.13 6738.43 6741.64 T:elephant176v2 7294.43 7296.52 7299.50 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.44 2.45 2.47 T:aes128gcmv1 2.78 2.78 2.79 aes256gcmv1 8.61 8.63 8.66 ascon128av12 12.44 12.46 12.48 T:xoodyakround3 12.73 12.75 12.77 ascon128v12 12.73 12.75 12.80 ascon80pqv12 16.94 16.96 16.97 ascon128abi32v12 22.69 22.71 22.74 T:schwaemm256128v2 24.10 24.13 24.18 ascon128bi32v12 28.01 28.16 28.20 T:grain128aeadv2 29.80 29.83 29.86 romulusn 29.98 30.04 30.07 T:schwaemm192192v2 32.45 32.50 32.55 T:schwaemm128128v2 32.99 33.02 33.04 T:schwaemm256256v2 36.08 36.10 36.14 T:giftcofb128v1 37.42 37.56 37.74 T:isapa128v20 41.41 41.47 41.54 romulusm 42.64 42.68 42.72 T:tinyjambu128v2 46.13 46.18 46.23 T:isapa128av20 47.53 47.56 47.60 T:tinyjambu192v2 50.29 50.31 50.36 T:tinyjambu256v2 73.52 73.59 73.81 T:isapk128av20 85.74 85.80 85.93 romulust 95.80 96.08 96.74 T:isapk128v20 127.01 127.10 127.23 T:elephant200v2 140.70 141.26 142.07 T:isapxv20 6704.57 6738.72 6741.94 T:elephant176v2 7295.33 7297.24 7301.27 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.45 2.46 2.46 T:aes128gcmv1 2.78 2.78 2.79 aes256gcmv1 8.62 8.65 8.69 ascon128av12 12.48 12.49 12.54 T:xoodyakround3 12.73 12.74 12.76 ascon128v12 12.73 12.76 12.79 ascon80pqv12 16.93 16.96 16.97 ascon128abi32v12 22.69 22.71 22.75 T:schwaemm256128v2 24.10 24.12 24.16 ascon128bi32v12 24.97 25.02 25.04 T:isapa128v20 28.00 28.16 28.19 T:grain128aeadv2 29.78 29.83 29.85 romulusn 30.00 30.05 30.07 T:schwaemm192192v2 32.47 32.50 32.53 T:schwaemm128128v2 33.01 33.02 33.03 T:schwaemm256256v2 36.07 36.10 36.14 T:giftcofb128v1 37.22 37.26 37.28 T:isapa128av20 41.41 41.45 41.55 romulusm 42.64 42.69 42.74 T:tinyjambu128v2 43.77 43.82 43.94 romulust 47.54 47.57 47.62 T:tinyjambu192v2 50.29 50.31 50.35 T:tinyjambu256v2 58.37 58.41 58.49 T:isapk128av20 73.48 73.54 73.65 T:isapk128v20 104.19 104.48 105.12 T:isapxv20 127.00 127.12 127.22 T:elephant200v2 6705.73 6738.49 6741.89 T:elephant176v2 7294.72 7296.63 7299.92 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.78 1.79 1.80 aes256gcmv1 1.80 1.81 1.82 T:aes128gcmv1 8.50 8.53 8.55 T:xoodyakround3 8.62 8.63 8.64 ascon128av12 12.56 12.57 12.60 ascon80pqv12 12.58 12.61 12.63 ascon128v12 16.66 16.69 16.71 ascon128abi32v12 22.54 22.60 22.63 T:schwaemm256128v2 23.23 23.27 23.30 romulusn 23.28 23.32 23.37 romulusm 24.13 24.21 24.51 ascon128bi32v12 24.93 24.97 25.10 T:isapa128v20 27.48 27.50 27.53 T:grain128aeadv2 29.86 29.89 29.93 T:schwaemm192192v2 32.21 32.26 32.30 T:schwaemm128128v2 32.44 32.50 32.82 T:tinyjambu256v2 32.88 32.90 32.92 T:schwaemm256256v2 32.98 33.03 33.07 T:tinyjambu192v2 33.73 33.76 33.79 T:tinyjambu128v2 36.20 36.24 36.28 T:giftcofb128v1 37.20 37.27 37.32 T:isapa128av20 43.55 43.59 43.64 romulust 58.07 58.40 58.71 T:isapk128av20 73.53 73.62 73.76 T:isapk128v20 84.25 84.32 84.37 T:elephant200v2 104.26 104.66 105.11 T:isapxv20 4435.03 4456.39 4459.46 T:elephant176v2 4860.68 4862.67 4864.86 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.79 1.80 1.81 aes256gcmv1 1.80 1.81 1.83 T:aes128gcmv1 8.51 8.54 8.56 T:xoodyakround3 8.54 8.57 8.62 ascon128av12 12.64 12.67 12.69 ascon128v12 12.66 12.69 12.73 ascon80pqv12 17.09 17.12 17.13 ascon128abi32v12 22.53 22.56 22.59 T:schwaemm256128v2 23.26 23.31 23.40 romulusm 23.26 23.31 23.35 romulusn 23.99 24.03 24.17 ascon128bi32v12 24.90 24.93 25.02 T:isapa128v20 27.54 27.76 27.79 T:grain128aeadv2 29.85 29.92 29.96 T:schwaemm192192v2 32.35 32.41 32.46 T:schwaemm128128v2 32.86 32.90 32.93 T:schwaemm256256v2 32.92 32.96 32.99 T:tinyjambu192v2 33.49 33.53 33.57 T:tinyjambu256v2 33.75 33.77 33.82 T:tinyjambu128v2 36.18 36.24 36.30 T:giftcofb128v1 37.23 37.28 37.31 T:isapa128av20 43.57 43.64 43.73 romulust 58.32 58.37 58.42 T:isapk128av20 73.99 74.18 74.27 T:isapk128v20 84.24 84.28 84.32 T:elephant200v2 104.10 104.51 105.31 T:isapxv20 4434.45 4456.29 4459.27 T:elephant176v2 4860.45 4862.21 4864.17 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.79 1.80 1.80 aes256gcmv1 1.79 1.80 1.82 T:aes128gcmv1 8.50 8.54 8.56 T:xoodyakround3 8.58 8.62 8.63 ascon128av12 12.64 12.65 12.68 ascon128v12 12.65 12.68 12.71 ascon80pqv12 17.10 17.11 17.13 ascon128abi32v12 22.55 22.58 22.62 T:schwaemm256128v2 23.26 23.30 23.38 romulusm 23.26 23.31 23.35 romulusn 23.99 24.02 24.13 ascon128bi32v12 24.89 24.97 25.02 T:isapa128v20 27.57 27.77 27.80 T:grain128aeadv2 29.86 29.91 29.95 T:schwaemm192192v2 32.40 32.44 32.50 T:schwaemm128128v2 32.88 32.90 32.93 T:schwaemm256256v2 32.93 32.98 33.01 T:tinyjambu192v2 33.47 33.50 33.53 T:tinyjambu256v2 33.75 33.78 33.81 T:tinyjambu128v2 36.20 36.25 36.29 T:giftcofb128v1 37.23 37.28 37.33 T:isapa128av20 43.55 43.62 43.73 romulust 57.91 58.25 58.38 T:isapk128av20 73.68 74.16 74.30 T:isapk128v20 84.26 84.30 84.35 T:elephant200v2 104.17 104.52 105.34 T:isapxv20 4433.36 4456.29 4458.86 T:elephant176v2 4860.51 4862.63 4864.13 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.39 2.39 2.40 T:aes128gcmv1 2.56 2.57 2.57 aes256gcmv1 8.92 8.93 8.95 ascon128av12 12.68 12.71 12.73 T:xoodyakround3 12.89 12.91 12.92 ascon80pqv12 12.93 12.94 12.95 ascon128v12 17.10 17.12 17.13 ascon128abi32v12 23.34 23.36 23.38 T:schwaemm256128v2 24.65 24.75 24.84 ascon128bi32v12 27.84 27.85 27.88 T:grain128aeadv2 30.26 30.28 30.31 romulusn 30.74 30.75 30.77 T:schwaemm192192v2 32.82 32.84 32.87 T:schwaemm128128v2 33.97 34.00 34.00 T:schwaemm256256v2 36.44 36.47 36.51 T:giftcofb128v1 41.94 41.97 42.02 romulusm 42.97 43.00 43.01 T:tinyjambu128v2 47.65 47.69 47.72 T:tinyjambu192v2 49.24 49.26 49.30 T:isapa128av20 50.11 50.13 50.25 T:tinyjambu256v2 54.97 55.05 55.27 T:isapa128v20 85.56 85.77 86.05 T:isapk128av20 87.06 87.11 87.15 romulust 129.70 129.81 129.87 T:elephant200v2 171.00 171.14 171.59 T:isapk128v20 226.42 227.39 229.42 T:isapxv20 6758.89 6788.57 6790.42 T:elephant176v2 7378.04 7379.00 7380.26 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.67 2.67 2.68 T:aes128gcmv1 3.03 3.04 3.04 aes256gcmv1 8.83 8.84 8.87 ascon128av12 12.58 12.59 12.61 T:xoodyakround3 12.92 12.93 12.95 ascon128v12 12.94 12.96 12.99 ascon80pqv12 17.32 17.34 17.35 ascon128abi32v12 23.35 23.37 23.38 T:schwaemm256128v2 24.50 24.54 24.62 ascon128bi32v12 28.45 28.61 28.63 T:grain128aeadv2 30.33 30.36 30.39 romulusn 30.70 30.72 30.74 T:schwaemm192192v2 32.91 32.93 32.96 T:schwaemm128128v2 33.94 33.96 33.97 T:schwaemm256256v2 36.39 36.41 36.44 T:giftcofb128v1 42.04 42.08 42.15 romulusm 43.01 43.04 43.07 T:tinyjambu128v2 47.91 47.93 47.95 T:tinyjambu192v2 49.23 49.25 49.28 T:isapa128av20 50.69 50.71 50.74 T:tinyjambu256v2 54.95 54.98 55.24 T:isapa128v20 85.55 85.67 85.77 T:isapk128av20 87.07 87.13 87.23 romulust 129.69 129.79 129.88 T:elephant200v2 170.96 171.10 171.74 T:isapk128v20 226.49 226.97 227.54 T:isapxv20 6758.76 6788.89 6790.73 T:elephant176v2 7378.19 7379.13 7380.67 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.67 2.67 2.68 T:aes128gcmv1 3.03 3.04 3.04 aes256gcmv1 8.83 8.86 8.89 ascon128av12 12.64 12.65 12.68 T:xoodyakround3 12.93 12.94 12.96 ascon128v12 12.92 12.95 12.98 ascon80pqv12 17.32 17.34 17.35 ascon128abi32v12 23.35 23.36 23.38 T:schwaemm256128v2 24.48 24.52 24.56 ascon128bi32v12 28.44 28.60 28.62 T:grain128aeadv2 30.34 30.36 30.38 romulusn 30.70 30.72 30.74 T:schwaemm192192v2 32.91 32.92 32.95 T:schwaemm128128v2 33.85 33.86 33.88 T:isapa128v20 33.95 33.96 33.98 T:schwaemm256256v2 36.41 36.43 36.46 T:giftcofb128v1 38.99 39.03 39.09 T:isapa128av20 42.02 42.06 42.14 romulusm 42.98 43.01 43.05 T:tinyjambu128v2 45.04 45.09 45.17 romulust 47.91 47.94 47.97 T:tinyjambu192v2 50.67 50.70 50.71 T:tinyjambu256v2 65.89 65.93 66.11 T:isapk128av20 112.68 112.73 112.81 T:isapk128v20 129.70 129.79 129.89 T:elephant200v2 148.06 148.30 148.81 T:isapxv20 6759.73 6788.86 6791.37 T:elephant176v2 7378.21 7379.00 7381.34 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.56 9.64 9.84 T:aes128gcmv1 11.60 11.66 11.85 aes256gcmv1 13.40 13.55 13.79 ascon128av12 17.17 17.23 17.37 ascon80pqv12 17.29 17.35 17.42 ascon128v12 18.41 18.50 18.63 T:xoodyakround3 25.65 25.69 25.85 ascon128abi32v12 33.90 34.08 34.83 ascon128bi32v12 37.94 38.06 38.11 T:schwaemm256128v2 38.11 38.23 38.45 T:grain128aeadv2 42.13 42.22 42.38 T:schwaemm128128v2 42.53 42.62 42.74 romulusn 43.95 44.18 44.56 T:giftcofb128v1 49.61 49.76 50.03 T:schwaemm192192v2 50.66 50.79 51.01 T:tinyjambu128v2 54.36 54.46 54.54 T:schwaemm256256v2 54.58 54.75 54.91 romulusm 55.70 56.03 56.11 T:tinyjambu192v2 58.60 58.87 59.00 T:tinyjambu256v2 116.95 117.16 117.56 romulust 119.61 120.05 120.55 T:isapa128av20 183.38 183.64 183.99 T:elephant200v2 345.04 345.32 345.74 T:isapk128av20 454.98 457.25 459.31 T:isapa128v20 1872.07 1873.32 1877.56 T:isapk128v20 2166.97 2169.50 2174.14 T:isapxv20 8415.81 8444.77 8451.24 T:elephant176v2 9867.37 9869.82 9896.01 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.58 9.68 9.84 T:aes128gcmv1 11.58 11.65 11.75 aes256gcmv1 13.43 13.54 13.71 ascon128av12 17.25 17.27 17.36 ascon80pqv12 17.34 17.34 17.43 ascon128v12 18.30 18.37 18.45 T:xoodyakround3 25.94 25.99 26.12 ascon128abi32v12 33.46 33.58 33.72 ascon128bi32v12 37.96 37.98 38.02 T:schwaemm256128v2 38.68 38.85 38.96 T:grain128aeadv2 42.00 42.19 42.35 T:schwaemm128128v2 42.70 42.89 43.05 romulusn 44.07 44.23 44.39 T:giftcofb128v1 49.80 50.02 51.43 T:schwaemm192192v2 50.59 50.71 50.93 T:tinyjambu128v2 54.40 54.50 54.59 T:schwaemm256256v2 56.15 56.30 56.47 T:tinyjambu192v2 56.85 56.94 57.11 romulusm 59.35 59.48 59.58 T:tinyjambu256v2 117.37 117.63 117.85 romulust 119.47 119.91 121.48 T:isapa128av20 183.34 183.62 183.84 T:elephant200v2 345.35 345.54 345.74 T:isapk128av20 454.86 456.10 460.92 T:isapa128v20 1872.07 1873.90 1879.83 T:isapk128v20 2168.98 2173.85 2176.56 T:isapxv20 8418.46 8444.51 8450.23 T:elephant176v2 9867.35 9869.43 9903.01 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.58 9.62 9.76 T:aes128gcmv1 11.56 11.62 11.70 aes256gcmv1 13.41 13.53 13.66 ascon128av12 17.24 17.29 17.42 ascon128v12 17.20 17.43 17.52 ascon80pqv12 18.40 18.46 18.50 T:xoodyakround3 26.02 26.04 26.06 ascon128abi32v12 33.42 33.51 33.62 ascon128bi32v12 37.86 37.95 38.02 T:schwaemm256128v2 38.85 38.99 39.06 T:grain128aeadv2 42.12 42.15 42.28 T:schwaemm128128v2 42.67 42.79 42.90 romulusn 44.10 44.19 44.31 T:giftcofb128v1 49.73 49.87 51.15 T:schwaemm192192v2 50.59 50.72 50.82 T:tinyjambu128v2 54.45 54.55 54.67 T:schwaemm256256v2 56.19 56.29 56.44 T:tinyjambu192v2 56.82 56.94 57.06 romulusm 59.30 59.45 59.56 T:tinyjambu256v2 73.73 74.00 74.33 romulust 79.33 79.34 81.27 T:isapa128av20 183.38 183.55 183.74 T:elephant200v2 226.26 226.41 226.69 T:isapk128av20 236.55 236.81 237.37 T:isapa128v20 997.57 998.03 999.12 T:isapk128v20 1134.74 1138.24 1139.76 T:isapxv20 8418.73 8443.70 8456.43 T:elephant176v2 9867.54 9869.83 9894.67 T:elephant160v2