VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260217

[Page version: 20260405 18:05:21]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.12 3.13 3.14 T:aes128gcmv1 3.38 3.39 3.40 aes256gcmv1 8.59 8.62 8.64 ascon128av12 12.72 12.75 12.83 ascon128v12 12.74 12.76 12.87 ascon80pqv12 16.45 16.59 16.67 ascon128abi32v12 17.41 17.47 17.51 T:xoodyakround3 23.44 23.49 23.54 T:schwaemm256128v2 24.36 24.38 24.41 ascon128bi32v12 27.90 27.94 28.33 T:grain128aeadv2 30.87 30.91 30.96 T:schwaemm192192v2 33.28 33.34 33.40 T:schwaemm128128v2 33.78 33.81 33.84 T:schwaemm256256v2 36.18 36.22 36.26 romulusn 44.72 44.76 44.81 T:giftcofb128v1 47.84 47.90 47.98 T:isapa128v20 50.71 50.73 50.81 T:isapa128av20 50.82 50.84 50.91 T:tinyjambu128v2 57.15 57.21 57.26 T:tinyjambu192v2 59.26 59.28 59.33 T:tinyjambu256v2 59.41 59.47 59.53 romulusm 90.94 91.32 91.54 T:isapk128av20 121.39 121.66 122.40 T:isapk128v20 127.88 128.02 128.19 romulust 182.99 183.20 183.95 T:elephant200v2 189.67? 191.71? 210.98? T:isapxv20 9205.53 9216.50 9255.68 T:elephant176v2 10538.52 10544.17 10548.10 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.18 3.18 3.20 T:aes128gcmv1 3.42 3.43 3.44 aes256gcmv1 8.52 8.54 8.61 ascon128av12 12.79 12.83 12.86 ascon80pqv12 12.83 12.85 12.86 ascon128v12 16.68 16.73 16.76 ascon128abi32v12 17.24 17.37 17.44 T:xoodyakround3 23.34 23.40 23.47 T:schwaemm256128v2 24.45 24.48 24.51 ascon128bi32v12 29.17 29.23 29.56 T:grain128aeadv2 30.84 30.89 30.94 T:schwaemm192192v2 33.44 33.52 33.60 T:schwaemm128128v2 34.05 34.11 34.32 T:schwaemm256256v2 36.29 36.33 36.36 romulusn 44.74 44.78 44.83 T:giftcofb128v1 47.91 47.96 48.02 T:isapa128v20 50.68 50.72 50.76 T:isapa128av20 50.94 50.98 51.04 T:tinyjambu128v2 57.82 57.89 57.97 T:tinyjambu192v2 59.59 59.66 59.73 romulusm 59.89 59.93 59.95 T:tinyjambu256v2 91.18 91.28 91.53 T:isapk128av20 121.50 121.66 122.10 T:isapk128v20 127.83 127.95 128.14 romulust 182.98 183.22 183.97 T:elephant200v2 190.89 191.90 199.51 T:isapxv20 9208.89 9220.71 9261.59 T:elephant176v2 10537.82 10545.04 10548.98 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.17 3.18 3.19 T:aes128gcmv1 3.42 3.43 3.44 aes256gcmv1 8.52 8.61 8.66 ascon128av12 12.75 12.79 12.84 ascon80pqv12 12.83 12.85 12.87 ascon128v12 16.66 16.73 16.77 ascon128abi32v12 17.22 17.33 17.63 T:xoodyakround3 23.33 23.37 23.45 T:schwaemm256128v2 23.47 23.50 23.56 T:isapa128v20 24.47 24.48 24.51 ascon128bi32v12 29.17 29.22 29.53 T:grain128aeadv2 30.80 30.86 30.94 T:schwaemm192192v2 33.48 33.55 33.63 T:schwaemm128128v2 34.06 34.12 34.28 T:schwaemm256256v2 34.29 34.34 34.41 T:isapa128av20 36.28 36.32 36.36 romulusn 44.56 44.78 44.84 T:giftcofb128v1 44.87 44.97 45.12 romulust 50.99 51.00 51.02 T:tinyjambu128v2 57.82 57.90 57.97 T:tinyjambu192v2 59.59 59.65 59.72 romulusm 59.89 59.94 59.99 T:tinyjambu256v2 60.95 61.01 61.12 T:isapk128av20 75.53 75.96 76.03 T:isapk128v20 112.34 112.69 112.91 T:isapxv20 182.98 183.23 183.93 T:elephant200v2 9207.94 9220.31 9256.44 T:elephant176v2 10537.50 10543.96 10547.14 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.47 2.48 2.48 T:aes128gcmv1 2.60 2.60 2.61 aes256gcmv1 8.56 8.57 8.59 ascon128av12 12.72 12.76 12.78 ascon128v12 12.78 12.84 12.85 ascon80pqv12 13.14 13.19 13.22 T:xoodyakround3 16.53 16.57 16.59 ascon128abi32v12 23.22 23.25 23.28 T:schwaemm256128v2 24.25 24.27 24.29 ascon128bi32v12 27.78 27.83 28.26 T:grain128aeadv2 29.73 29.76 29.79 romulusn 30.71 30.74 30.78 T:schwaemm192192v2 33.17 33.23 33.27 T:schwaemm128128v2 33.70 33.72 33.73 T:schwaemm256256v2 35.73 35.88 36.03 T:isapa128v20 40.88 40.90 40.92 T:tinyjambu128v2 41.37 41.40 41.44 romulusm 42.57 42.60 42.62 T:isapa128av20 44.44 44.46 44.49 T:tinyjambu192v2 44.52 44.55 44.58 T:tinyjambu256v2 44.68 44.72 44.75 T:giftcofb128v1 75.71 75.81 75.97 T:isapk128av20 86.16 86.28 86.36 romulust 98.63 98.71 98.88 T:isapk128v20 136.66 136.79 137.43 T:elephant200v2 150.91? 152.85? 171.44? T:isapxv20 6881.00 6887.35 6919.08 T:elephant176v2 7907.15 7912.60 7914.51 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.50 2.51 2.52 T:aes128gcmv1 2.62 2.63 2.64 aes256gcmv1 8.51 8.55 8.58 ascon128av12 12.73 12.76 12.79 ascon128v12 12.78 12.80 12.82 ascon80pqv12 13.10 13.11 13.13 T:xoodyakround3 16.79 16.82 16.87 ascon128abi32v12 23.22 23.26 23.29 T:schwaemm256128v2 24.20 24.29 24.33 ascon128bi32v12 28.55 28.63 28.94 T:grain128aeadv2 29.75 29.78 29.80 romulusn 30.69 30.73 30.77 T:schwaemm192192v2 33.18 33.24 33.30 T:schwaemm128128v2 33.79 33.83 34.03 T:schwaemm256256v2 35.67 35.76 35.85 T:isapa128v20 40.96 40.99 41.01 T:tinyjambu128v2 41.43 41.45 41.48 romulusm 42.54 42.57 42.60 T:isapa128av20 44.62 44.67 44.71 T:tinyjambu192v2 44.69 44.73 44.74 T:giftcofb128v1 44.87 44.90 44.91 T:tinyjambu256v2 75.67 75.80 75.93 T:isapk128av20 86.23 86.34 86.43 romulust 98.60 98.71 98.81 T:isapk128v20 136.66 136.91 137.45 T:elephant200v2 151.79 152.82 156.22 T:isapxv20 6880.15 6886.43 6919.44 T:elephant176v2 7906.48 7912.00 7914.46 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.50 2.51 2.51 T:aes128gcmv1 2.62 2.63 2.63 aes256gcmv1 8.49 8.52 8.55 ascon128av12 12.74 12.76 12.79 ascon128v12 12.78 12.80 12.82 ascon80pqv12 13.12 13.13 13.16 T:xoodyakround3 16.84 16.86 16.87 ascon128abi32v12 23.23 23.27 23.30 T:schwaemm256128v2 23.44 23.46 23.50 T:isapa128v20 24.20 24.26 24.32 ascon128bi32v12 28.56 28.63 28.93 T:grain128aeadv2 29.77 29.80 29.83 romulusn 30.68 30.71 30.76 T:schwaemm192192v2 33.19 33.24 33.29 T:schwaemm128128v2 33.78 33.83 34.02 T:schwaemm256256v2 34.32 34.35 34.37 T:isapa128av20 40.95 40.98 41.02 T:tinyjambu128v2 41.42 41.45 41.49 romulusm 44.62 44.67 44.71 T:tinyjambu192v2 44.69 44.73 44.74 T:giftcofb128v1 44.70 44.78 44.92 romulust 44.87 44.88 44.91 T:tinyjambu256v2 60.61 60.67 60.75 T:isapk128av20 75.58 75.62 75.69 T:isapk128v20 112.51 112.70 112.85 T:isapxv20 136.65 136.82 137.43 T:elephant200v2 6877.65 6885.69 6914.83 T:elephant176v2 7907.56 7912.55 7915.10 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.81 1.82 1.83 T:aes128gcmv1 1.81 1.82 1.83 aes256gcmv1 8.48 8.51 8.55 ascon128av12 8.91 8.94 8.98 T:xoodyakround3 12.67 12.70 12.72 ascon128v12 12.76 12.78 12.81 ascon80pqv12 16.48 16.50 16.52 ascon128abi32v12 23.02 23.05 23.11 T:schwaemm256128v2 23.24 23.28 23.32 romulusn 23.28 23.31 23.34 romulusm 23.63 23.67 23.71 T:isapa128v20 24.16 24.19 24.22 ascon128bi32v12 27.67 27.72 28.16 T:grain128aeadv2 29.78 29.82 29.85 T:tinyjambu256v2 30.53 30.55 30.60 T:schwaemm192192v2 30.92 30.94 30.96 T:tinyjambu128v2 31.70 31.72 31.76 T:tinyjambu192v2 33.13 33.19 33.26 T:schwaemm128128v2 33.59 33.63 33.67 T:schwaemm256256v2 34.29 34.35 34.39 T:isapa128av20 44.64 44.67 44.71 T:giftcofb128v1 44.65 44.79 44.91 romulust 60.11 60.21 60.34 T:isapk128av20 75.60 75.67 75.76 T:isapk128v20 92.31 92.40 92.70 T:elephant200v2 111.48? 113.41? 133.00? T:isapxv20 4545.39 4552.00 4572.89 T:elephant176v2 5270.32 5274.29 5279.72 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.82 1.83 1.84 aes256gcmv1 1.83 1.84 1.85 T:aes128gcmv1 8.46 8.49 8.52 ascon128av12 8.91 8.94 8.97 T:xoodyakround3 12.64 12.67 12.71 ascon128v12 12.74 12.76 12.79 ascon80pqv12 17.00 17.02 17.05 ascon128abi32v12 23.12 23.15 23.19 T:schwaemm256128v2 23.23 23.27 23.32 romulusn 23.24 23.28 23.32 romulusm 23.41 23.43 23.45 T:isapa128v20 24.13 24.15 24.18 ascon128bi32v12 27.94 28.05 28.33 T:grain128aeadv2 29.75 29.78 29.83 T:tinyjambu256v2 30.53 30.58 30.64 T:schwaemm192192v2 30.93 30.97 30.99 T:tinyjambu128v2 31.48 31.49 31.51 T:tinyjambu192v2 32.88 32.93 33.01 T:schwaemm128128v2 33.50 33.54 33.76 T:schwaemm256256v2 34.33 34.36 34.40 T:isapa128av20 44.63 44.68 44.73 T:giftcofb128v1 44.60 44.70 44.98 romulust 60.07 60.16 60.37 T:isapk128av20 75.58 75.63 75.73 T:isapk128v20 92.31 92.42 92.74 T:elephant200v2 112.42 112.75 113.04 T:isapxv20 4544.81 4550.90 4572.19 T:elephant176v2 5267.37 5271.44 5277.61 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.82 1.83 1.84 aes256gcmv1 1.83 1.84 1.85 T:aes128gcmv1 8.46 8.49 8.50 ascon128av12 8.91 8.95 8.97 T:xoodyakround3 12.65 12.67 12.72 ascon128v12 12.73 12.74 12.77 ascon80pqv12 16.99 17.01 17.04 ascon128abi32v12 23.08 23.14 23.20 T:schwaemm256128v2 23.24 23.28 23.33 romulusn 23.25 23.29 23.32 romulusm 23.41 23.46 23.49 T:isapa128v20 24.15 24.16 24.31 ascon128bi32v12 27.95 28.06 28.32 T:grain128aeadv2 29.76 29.79 29.83 T:tinyjambu256v2 30.52 30.56 30.61 T:schwaemm192192v2 30.91 30.95 30.98 T:tinyjambu128v2 31.48 31.49 31.50 T:tinyjambu192v2 32.85 32.91 32.97 T:schwaemm128128v2 33.49 33.56 33.77 T:schwaemm256256v2 34.30 34.32 34.37 T:isapa128av20 44.61 44.65 44.69 T:giftcofb128v1 44.61 44.71 44.84 romulust 60.13 60.24 60.51 T:isapk128av20 75.61 75.69 75.80 T:isapk128v20 92.32 92.42 92.73 T:elephant200v2 112.39 112.78 113.01 T:isapxv20 4546.21 4554.07 4571.67 T:elephant176v2 5268.46 5272.37 5279.03 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.69 2.69 2.70 T:aes128gcmv1 2.84 2.84 2.85 aes256gcmv1 8.77 8.79 8.79 ascon128av12 12.92 12.96 12.98 ascon128v12 13.00 13.02 13.04 ascon80pqv12 13.30 13.33 13.37 T:xoodyakround3 16.91 16.93 16.95 ascon128abi32v12 23.91 23.93 23.97 T:schwaemm256128v2 24.73 24.74 24.76 ascon128bi32v12 28.26 28.28 28.66 T:grain128aeadv2 30.07 30.08 30.10 romulusn 31.40 31.43 31.44 T:schwaemm192192v2 33.63 33.67 33.72 T:schwaemm128128v2 34.62 34.64 34.68 T:schwaemm256256v2 41.20 41.22 41.25 T:tinyjambu128v2 41.69 41.71 41.75 romulusm 44.79 44.81 44.86 T:tinyjambu192v2 44.89 44.91 44.94 T:tinyjambu256v2 45.06 45.09 45.11 T:giftcofb128v1 45.43 45.45 45.46 T:isapa128av20 52.60 52.71 52.87 T:isapa128v20 86.84 86.94 87.02 T:isapk128av20 87.50 87.57 87.67 romulust 139.59 139.70 140.29 T:elephant200v2 173.70 173.74 173.86 T:isapk128v20 245.21 245.47 263.25 T:isapxv20 6935.41 6940.02 6966.97 T:elephant176v2 7995.76 7999.32 8003.91 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.72 2.72 2.73 T:aes128gcmv1 2.87 2.88 2.88 aes256gcmv1 8.71 8.74 8.77 ascon128av12 12.93 12.95 12.98 ascon128v12 12.97 12.99 13.01 ascon80pqv12 13.23 13.24 13.26 T:xoodyakround3 17.19 17.21 17.25 ascon128abi32v12 23.90 23.93 23.97 T:schwaemm256128v2 24.69 24.73 24.79 ascon128bi32v12 29.02 29.08 29.36 T:grain128aeadv2 30.10 30.12 30.14 romulusn 31.36 31.42 31.47 T:schwaemm192192v2 33.64 33.67 33.73 T:schwaemm128128v2 34.68 34.70 34.95 T:schwaemm256256v2 41.31 41.32 41.34 T:tinyjambu128v2 41.86 41.89 41.92 romulusm 44.96 45.00 45.03 T:tinyjambu192v2 45.07 45.10 45.13 T:giftcofb128v1 45.21 45.23 45.27 T:tinyjambu256v2 45.41 45.42 45.44 T:isapa128av20 52.63 52.71 52.89 T:isapa128v20 86.81 86.93 87.02 T:isapk128av20 87.54 87.60 87.68 romulust 139.61 139.80 140.32 T:elephant200v2 173.70 173.76 174.00 T:isapk128v20 245.34 245.71 249.26 T:isapxv20 6935.41 6940.50 6964.64 T:elephant176v2 7997.11 8000.74 8004.17 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.72 2.72 2.73 T:aes128gcmv1 2.87 2.88 2.88 aes256gcmv1 8.70 8.72 8.75 ascon128av12 12.93 12.96 12.98 ascon128v12 12.96 12.99 13.01 ascon80pqv12 13.27 13.29 13.34 T:xoodyakround3 17.22 17.24 17.26 ascon128abi32v12 23.89 23.91 23.95 T:schwaemm256128v2 24.68 24.74 24.79 ascon128bi32v12 29.04 29.10 29.37 T:grain128aeadv2 30.11 30.13 30.15 romulusn 31.37 31.39 31.43 T:schwaemm192192v2 32.23 32.24 32.26 T:isapa128v20 33.63 33.66 33.72 T:schwaemm128128v2 34.68 34.70 34.92 T:schwaemm256256v2 36.00 36.02 36.05 T:isapa128av20 41.29 41.31 41.35 T:tinyjambu128v2 41.86 41.90 41.92 romulusm 44.97 45.01 45.04 T:tinyjambu192v2 45.10 45.12 45.16 T:giftcofb128v1 45.21 45.24 45.28 T:tinyjambu256v2 45.93 45.97 46.09 romulust 67.64 67.66 67.69 T:isapk128av20 114.82 114.84 114.90 T:isapk128v20 139.61 139.75 140.29 T:elephant200v2 160.38 160.45 160.56 T:isapxv20 6932.86 6939.96 6965.28 T:elephant176v2 7996.82 8000.51 8003.52 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.63 9.69 9.75 T:aes128gcmv1 10.53 10.65 10.75 aes256gcmv1 13.34 13.42 13.72 ascon128av12 17.14 17.26 17.35 ascon128v12 17.15 17.27 17.42 ascon80pqv12 19.31 19.39 19.64 T:xoodyakround3 25.23 25.28 25.38 ascon128abi32v12 35.33 35.41 35.54 ascon128bi32v12 37.36 37.50 37.64 romulusn 38.60 38.77 38.95 T:grain128aeadv2 39.02 39.08 39.16 T:schwaemm256128v2 43.04 43.36 44.03 T:schwaemm128128v2 48.28 48.38 48.53 T:tinyjambu128v2 49.64 49.76 49.93 romulusm 50.57 50.76 50.99 T:schwaemm192192v2 52.40 52.68 52.87 T:tinyjambu192v2 52.63 52.82 52.94 T:tinyjambu256v2 53.35 53.46 53.64 T:giftcofb128v1 54.83 54.86 55.01 T:schwaemm256256v2 111.20 111.52 111.70 T:isapa128av20 116.69 116.98 117.38 romulust 198.01 198.39 198.81 T:elephant200v2 321.16 323.21 324.20 T:isapk128av20 440.91 441.26 442.50 T:isapa128v20 1874.74 1875.71 1876.83 T:isapk128v20 2350.90 2352.17 2379.44 T:isapxv20 8621.35 8635.76 8664.20 T:elephant176v2 10693.29 10698.64 10719.84 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.62 9.65 9.74 T:aes128gcmv1 10.65 10.71 10.80 aes256gcmv1 13.30 13.31 13.43 ascon128av12 17.14 17.25 17.37 ascon128v12 17.23 17.27 17.40 ascon80pqv12 19.32 19.39 19.54 T:xoodyakround3 25.85 25.93 26.03 ascon128abi32v12 35.51 35.61 35.71 ascon128bi32v12 37.47 37.59 37.74 romulusn 38.85 38.92 39.22 T:schwaemm256128v2 39.10 39.31 39.68 T:grain128aeadv2 43.02 43.18 43.77 T:schwaemm128128v2 48.77 48.82 48.87 T:tinyjambu128v2 50.69 50.81 51.07 T:schwaemm192192v2 51.94 52.07 52.27 romulusm 52.72 52.90 53.06 T:tinyjambu192v2 53.14 53.25 53.47 T:tinyjambu256v2 53.61 53.77 53.92 T:giftcofb128v1 54.71 54.83 55.09 T:schwaemm256256v2 110.86 110.94 111.25 T:isapa128av20 116.80 117.11 117.77 romulust 197.98 198.35 198.58 T:elephant200v2 321.84 323.99 324.76 T:isapk128av20 441.15 441.51 442.30 T:isapa128v20 1875.26 1875.92 1877.16 T:isapk128v20 2364.99 2367.50 2368.53 T:isapxv20 8622.88 8631.13 8661.96 T:elephant176v2 10694.19 10699.34 10721.75 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.59 9.65 9.70 T:aes128gcmv1 10.63 10.73 10.91 aes256gcmv1 13.29 13.36 13.55 ascon128av12 17.16 17.25 17.38 ascon128v12 17.25 17.34 17.50 ascon80pqv12 19.37 19.43 19.62 T:xoodyakround3 25.83 25.91 26.03 ascon128abi32v12 35.51 35.59 35.69 ascon128bi32v12 37.47 37.63 37.72 romulusn 38.86 38.94 39.03 T:schwaemm256128v2 39.11 39.30 39.49 T:grain128aeadv2 42.91 43.09 43.57 T:schwaemm128128v2 48.69 48.94 49.22 T:tinyjambu128v2 50.75 51.01 51.39 T:schwaemm192192v2 51.90 52.08 52.25 romulusm 52.78 52.92 53.03 T:tinyjambu192v2 53.04 53.32 53.48 T:tinyjambu256v2 53.60 53.74 53.88 T:giftcofb128v1 54.71 54.81 55.06 T:schwaemm256256v2 73.84 74.05 74.31 T:isapa128av20 74.05 74.37 74.91 romulust 197.90 198.11 198.71 T:elephant200v2 214.21 214.50 217.77 T:isapk128av20 233.95 234.29 234.72 T:isapa128v20 998.48 998.85 999.63 T:isapk128v20 1237.17 1238.12 1242.04 T:isapxv20 8623.34 8640.72 8674.60 T:elephant176v2 10694.96 10698.26 10715.45 T:elephant160v2