VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20240625

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.14 3.15 3.17 T:aes128gcmv1 3.48 3.51 3.52 aes256gcmv1 9.08 9.12 9.18 ascon128av12 12.75 12.79 12.89 ascon80pqv12 12.82 12.85 12.89 ascon128v12 16.43 16.56 16.64 ascon128abi32v12 18.06 18.27 18.36 T:xoodyakround3 22.74 22.76 22.78 T:schwaemm256128v2 24.73 24.79 24.80 ascon128bi32v12 27.21 27.24 27.25 T:schwaemm256256v2 28.59 29.14 29.18 T:grain128aeadv2 30.01 30.02 30.04 T:schwaemm192192v2 33.05 33.06 33.08 T:schwaemm128128v2 36.77 36.79 36.86 romulusn 45.00 45.05 45.11 T:giftcofb128v1 54.88 54.93 54.96 T:isapa128av20 54.81 55.21 55.28 T:isapa128v20 56.13 56.22 56.29 T:tinyjambu128v2 60.08 60.13 60.16 romulusm 61.01 61.04 61.11 T:tinyjambu192v2 69.71 69.74 69.82 T:tinyjambu256v2 95.27 95.45 95.64 T:isapk128av20 119.51 119.59 119.82 romulust 127.37 128.17 128.41 T:isapk128v20 190.56 190.74 191.00 T:elephant200v2 192.36 194.30 195.69 T:isapxv20 9223.82 9231.06 9278.23 T:elephant176v2 10545.52 10546.61 10550.59 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.19 3.21 3.22 T:aes128gcmv1 3.50 3.52 3.53 aes256gcmv1 8.70 8.73 8.77 ascon128av12 12.74 12.79 12.83 ascon80pqv12 12.76 12.80 12.81 ascon128v12 16.59 16.70 16.83 ascon128abi32v12 17.83 17.88 17.90 T:xoodyakround3 22.74 22.76 22.77 T:schwaemm256128v2 24.69 24.73 24.89 ascon128bi32v12 27.26 27.27 27.30 T:schwaemm256256v2 29.50 29.86 29.90 T:grain128aeadv2 30.01 30.02 30.04 T:schwaemm192192v2 33.04 33.06 33.07 T:schwaemm128128v2 36.86 36.87 36.92 romulusn 44.97 45.04 45.06 T:giftcofb128v1 54.71 54.82 54.94 T:tinyjambu128v2 54.66 54.89 55.69 T:isapa128v20 54.86 54.94 54.99 T:isapa128av20 60.34 60.44 60.47 romulusm 60.79 60.85 60.91 T:tinyjambu192v2 69.59 69.62 69.75 T:tinyjambu256v2 95.19 95.54 95.66 T:isapk128av20 119.47 119.62 119.89 romulust 127.37 128.19 128.32 T:isapk128v20 190.55 190.92 191.11 T:elephant200v2 191.63 193.21 195.69 T:isapxv20 9222.04 9229.59 9279.82 T:elephant176v2 10544.07 10546.43 10553.46 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.19 3.20 3.21 T:aes128gcmv1 3.50 3.51 3.53 aes256gcmv1 8.72 8.75 8.78 ascon128av12 12.75 12.77 12.80 ascon128v12 12.77 12.81 12.83 ascon80pqv12 16.71 16.83 16.84 ascon128abi32v12 17.89 17.93 17.96 T:xoodyakround3 22.75 22.76 22.78 T:schwaemm256128v2 24.68 24.72 24.77 ascon128bi32v12 27.25 27.26 27.28 T:schwaemm256256v2 26.96 27.44 27.60 T:isapa128v20 29.51 29.86 29.94 T:grain128aeadv2 30.01 30.02 30.04 T:schwaemm192192v2 33.04 33.05 33.07 T:schwaemm128128v2 35.56 35.60 35.67 T:isapa128av20 36.85 36.89 36.94 romulusn 41.13 41.19 41.29 romulust 45.00 45.06 45.12 T:giftcofb128v1 54.80 54.92 54.98 T:tinyjambu128v2 60.30 60.36 60.42 romulusm 60.75 60.84 60.97 T:tinyjambu192v2 63.21 63.36 63.50 T:isapk128av20 69.58 69.62 69.71 T:tinyjambu256v2 79.50 79.68 79.98 T:isapk128v20 113.27 113.98 115.31 T:isapxv20 190.46 190.61 191.12 T:elephant200v2 9222.15 9229.23 9276.02 T:elephant176v2 10544.15 10545.98 10547.95 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.46 2.48 2.50 T:aes128gcmv1 2.63 2.66 2.67 aes256gcmv1 8.83 8.87 8.89 ascon128av12 12.65 12.68 12.78 ascon80pqv12 12.72 12.75 12.75 ascon128v12 13.72 13.77 13.82 T:xoodyakround3 16.46 16.56 16.66 ascon128abi32v12 22.62 22.64 22.65 T:schwaemm256128v2 24.80 24.81 24.84 ascon128bi32v12 27.09 27.11 27.18 T:schwaemm256256v2 28.62 29.04 29.11 T:grain128aeadv2 29.88 29.90 29.91 T:schwaemm192192v2 30.13 30.15 30.18 romulusn 32.92 32.92 32.95 T:schwaemm128128v2 41.30 41.42 41.66 T:isapa128v20 41.77 41.82 41.86 romulusm 44.99 45.06 45.10 T:giftcofb128v1 46.15 46.19 46.23 T:isapa128av20 46.19 46.22 46.30 T:tinyjambu128v2 48.49 48.52 48.56 T:tinyjambu192v2 53.41 53.42 53.45 T:tinyjambu256v2 79.11 79.21 79.32 T:isapk128av20 80.02 80.09 80.24 romulust 103.62 103.64 103.71 T:isapk128v20 143.53 143.68 143.86 T:elephant200v2 152.81 153.71 155.18 T:isapxv20 6888.65 6893.78 6929.72 T:elephant176v2 7907.48 7909.63 7912.28 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.49 2.51 2.53 T:aes128gcmv1 2.62 2.64 2.66 aes256gcmv1 8.61 8.64 8.68 ascon128av12 12.69 12.70 12.72 ascon128v12 12.69 12.71 12.72 ascon80pqv12 13.62 13.64 13.66 T:xoodyakround3 16.40 16.48 16.54 ascon128abi32v12 22.62 22.63 22.65 T:schwaemm256128v2 24.64 24.67 24.71 ascon128bi32v12 27.12 27.13 27.28 T:schwaemm256256v2 28.91 29.39 29.44 T:grain128aeadv2 29.88 29.90 29.92 T:schwaemm192192v2 30.18 30.20 30.25 romulusn 32.91 32.92 32.94 T:schwaemm128128v2 40.84 41.24 41.47 T:isapa128v20 41.86 41.90 41.97 romulusm 45.04 45.06 45.08 T:giftcofb128v1 45.87 45.90 45.99 T:tinyjambu128v2 46.12 46.15 46.24 T:isapa128av20 48.24 48.31 48.36 T:tinyjambu192v2 53.31 53.36 53.38 T:tinyjambu256v2 79.11 79.19 79.28 T:isapk128av20 80.00 80.09 80.30 romulust 103.57 103.66 103.83 T:isapk128v20 143.49 143.81 143.88 T:elephant200v2 152.43 153.80 154.79 T:isapxv20 6888.56 6896.17 6925.68 T:elephant176v2 7908.24 7910.54 7911.78 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.51 2.51 2.51 T:aes128gcmv1 2.64 2.65 2.66 aes256gcmv1 8.59 8.70 8.75 ascon128av12 12.69 12.70 12.80 ascon128v12 12.70 12.71 12.74 ascon80pqv12 13.67 13.68 13.70 T:xoodyakround3 16.35 16.49 16.51 ascon128abi32v12 22.62 22.63 22.65 T:schwaemm256128v2 24.65 24.68 24.69 ascon128bi32v12 27.11 27.13 27.21 T:schwaemm256256v2 27.29 27.49 27.58 T:isapa128v20 28.92 29.39 29.45 T:grain128aeadv2 29.88 29.89 29.91 T:schwaemm192192v2 30.18 30.21 30.23 romulusn 32.92 32.93 32.95 T:schwaemm128128v2 36.47 36.52 36.54 T:isapa128av20 40.87 40.90 40.95 romulust 41.90 41.92 41.98 romulusm 44.98 45.04 45.11 T:giftcofb128v1 45.84 45.92 45.97 T:tinyjambu128v2 48.25 48.28 48.35 T:tinyjambu192v2 53.35 53.37 53.39 T:tinyjambu256v2 63.12 63.16 63.20 T:isapk128av20 79.23 79.34 80.36 T:isapk128v20 113.17 114.17 114.63 T:isapxv20 143.40 143.65 144.00 T:elephant200v2 6888.60 6893.49 6925.92 T:elephant176v2 7906.20 7907.55 7910.45 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.81 1.82 1.84 T:aes128gcmv1 1.79 1.83 1.84 aes256gcmv1 8.52 8.60 8.64 ascon128av12 9.37 9.42 9.44 T:xoodyakround3 12.56 12.59 12.62 ascon80pqv12 12.59 12.60 12.62 ascon128v12 16.48 16.50 16.52 ascon128abi32v12 22.49 22.51 22.52 T:schwaemm256128v2 23.44 23.46 23.53 romulusm 23.45 23.49 23.55 romulusn 24.86 24.89 24.93 ascon128bi32v12 26.95 26.97 26.99 T:schwaemm256256v2 27.27 27.35 27.38 T:isapa128v20 28.24 28.88 28.93 T:grain128aeadv2 29.75 29.77 29.79 T:schwaemm192192v2 32.79 32.81 32.89 T:schwaemm128128v2 35.92 35.98 36.05 T:tinyjambu192v2 36.06 36.08 36.20 T:tinyjambu128v2 37.08 37.11 37.14 T:tinyjambu256v2 37.37 37.42 37.53 T:isapa128av20 40.55 40.63 40.67 romulust 45.07 45.13 45.18 T:giftcofb128v1 62.83 62.91 63.02 T:isapk128av20 79.11 79.19 79.26 T:isapk128v20 96.45 96.71 97.03 T:elephant200v2 112.83 113.46 114.48 T:isapxv20 4560.50 4563.38 4585.22 T:elephant176v2 5268.99 5269.95 5271.20 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.77 1.79 1.81 aes256gcmv1 1.79 1.82 1.84 T:aes128gcmv1 8.51 8.53 8.59 ascon128av12 9.41 9.43 9.46 T:xoodyakround3 12.59 12.61 12.63 ascon80pqv12 12.60 12.62 12.63 ascon128v12 16.16 16.18 16.19 ascon128abi32v12 22.49 22.51 22.53 T:schwaemm256128v2 23.43 23.48 23.50 romulusm 23.47 23.53 23.57 romulusn 24.60 24.63 24.67 ascon128bi32v12 26.98 26.99 27.00 T:schwaemm256256v2 27.27 27.34 27.40 T:isapa128v20 28.30 28.91 29.01 T:grain128aeadv2 29.76 29.77 29.78 T:schwaemm192192v2 32.78 32.79 32.83 T:schwaemm128128v2 35.72 35.77 35.80 T:tinyjambu192v2 36.88 36.92 36.94 T:tinyjambu128v2 37.06 37.08 37.13 T:tinyjambu256v2 37.39 37.45 37.51 T:isapa128av20 40.56 40.59 40.65 romulust 45.04 45.09 45.16 T:giftcofb128v1 62.83 62.91 62.94 T:isapk128av20 78.52 79.07 79.17 T:isapk128v20 96.49 96.73 96.93 T:elephant200v2 113.85 114.47 115.22 T:isapxv20 4561.58 4569.33 4585.53 T:elephant176v2 5268.98 5270.15 5275.44 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.78 1.79 1.80 aes256gcmv1 1.82 1.82 1.84 T:aes128gcmv1 8.51 8.54 8.59 ascon128av12 9.40 9.42 9.45 T:xoodyakround3 12.57 12.59 12.61 ascon128v12 12.58 12.60 12.62 ascon80pqv12 16.16 16.17 16.18 ascon128abi32v12 22.49 22.51 22.52 T:schwaemm256128v2 23.48 23.50 23.53 romulusn 23.47 23.50 23.53 romulusm 24.60 24.64 24.66 ascon128bi32v12 26.97 26.99 27.01 T:schwaemm256256v2 27.24 27.38 27.57 T:isapa128v20 28.35 28.91 29.02 T:grain128aeadv2 29.75 29.76 29.78 T:schwaemm192192v2 32.78 32.79 32.80 T:schwaemm128128v2 35.73 35.78 35.82 T:tinyjambu192v2 36.86 36.89 36.95 T:tinyjambu128v2 37.05 37.08 37.11 T:tinyjambu256v2 37.37 37.42 37.50 T:isapa128av20 40.55 40.61 40.65 romulust 45.03 45.10 45.15 T:giftcofb128v1 62.85 62.93 63.03 T:isapk128av20 79.08 79.13 79.18 T:isapk128v20 96.35 96.65 97.01 T:elephant200v2 112.87 114.44 114.63 T:isapxv20 4561.14 4566.14 4584.89 T:elephant176v2 5268.60 5269.26 5270.06 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.69 2.69 2.70 T:aes128gcmv1 2.89 2.90 2.91 aes256gcmv1 9.06 9.08 9.12 ascon128av12 12.86 12.88 12.98 ascon80pqv12 12.92 12.93 12.94 ascon128v12 13.88 13.92 13.98 T:xoodyakround3 16.86 16.93 17.04 ascon128abi32v12 23.29 23.29 23.30 T:schwaemm256128v2 25.17 25.20 25.22 ascon128bi32v12 27.83 27.84 27.86 T:schwaemm256256v2 29.00 29.53 29.55 T:grain128aeadv2 30.46 30.49 30.52 romulusn 30.56 30.57 30.57 T:schwaemm192192v2 33.35 33.37 33.41 T:schwaemm128128v2 42.13 42.17 42.19 romulusm 45.47 45.50 45.53 T:giftcofb128v1 46.53 46.59 46.64 T:tinyjambu128v2 48.86 48.90 48.94 T:tinyjambu192v2 50.01 50.04 50.07 T:isapa128av20 53.81 53.85 53.87 T:tinyjambu256v2 61.00 61.09 61.22 T:isapa128v20 81.29 81.36 81.45 romulust 90.39 90.45 90.50 T:isapk128av20 146.60 146.75 146.94 T:elephant200v2 182.45 182.68 183.83 T:isapk128v20 248.44 249.36 250.34 T:isapxv20 6942.98 6948.17 6976.19 T:elephant176v2 7996.12 7997.95 8001.00 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.72 2.72 2.73 T:aes128gcmv1 2.90 2.91 2.92 aes256gcmv1 8.83 8.87 8.95 ascon128av12 12.88 12.89 12.90 ascon128v12 12.89 12.91 12.92 ascon80pqv12 13.80 13.81 13.82 T:xoodyakround3 16.78 16.84 16.89 ascon128abi32v12 23.28 23.29 23.29 T:schwaemm256128v2 25.05 25.06 25.08 ascon128bi32v12 27.84 27.85 27.87 T:schwaemm256256v2 29.44 29.87 29.90 T:grain128aeadv2 30.53 30.55 30.56 romulusn 30.56 30.57 30.57 T:schwaemm192192v2 33.34 33.36 33.40 T:schwaemm128128v2 42.32 42.34 42.36 romulusm 45.50 45.52 45.57 T:giftcofb128v1 46.21 46.27 46.31 T:tinyjambu128v2 48.64 48.70 48.76 T:tinyjambu192v2 49.99 50.04 50.09 T:isapa128av20 53.74 53.78 53.81 T:tinyjambu256v2 61.04 61.09 61.22 T:isapa128v20 81.24 81.34 81.42 romulust 90.36 90.37 90.44 T:isapk128av20 146.63 146.72 146.87 T:elephant200v2 182.62 182.63 182.71 T:isapk128v20 248.71 248.80 249.93 T:isapxv20 6940.37 6942.67 6978.90 T:elephant176v2 7995.93 7997.08 7998.80 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.71 2.71 2.72 T:aes128gcmv1 2.90 2.91 2.92 aes256gcmv1 8.82 8.91 8.94 ascon128av12 12.88 12.90 12.98 ascon128v12 12.90 12.91 12.92 ascon80pqv12 13.83 13.83 13.85 T:xoodyakround3 16.87 16.88 16.88 ascon128abi32v12 23.28 23.28 23.29 T:schwaemm256128v2 25.05 25.07 25.09 ascon128bi32v12 27.85 27.87 27.92 T:schwaemm256256v2 29.46 29.86 29.87 T:grain128aeadv2 30.53 30.55 30.56 romulusn 30.56 30.57 30.58 T:schwaemm192192v2 33.33 33.35 33.40 T:schwaemm128128v2 37.53 37.60 37.76 T:isapa128v20 38.65 38.69 38.71 T:isapa128av20 42.05 42.10 42.21 romulust 42.33 42.36 42.39 romulusm 45.49 45.51 45.53 T:giftcofb128v1 46.22 46.27 46.30 T:tinyjambu128v2 48.66 48.70 48.73 T:tinyjambu192v2 53.74 53.77 53.80 T:tinyjambu256v2 70.24 70.26 70.30 T:isapk128av20 120.48 120.49 120.60 T:isapk128v20 146.47 146.68 146.92 T:elephant200v2 162.40 162.89 163.65 T:isapxv20 6942.03 6945.88 6974.94 T:elephant176v2 7996.15 7996.82 7997.80 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.43 9.51 9.63 T:aes128gcmv1 13.94 14.21 14.60 ascon128av12 14.28 14.45 14.62 aes256gcmv1 17.17 17.27 17.49 ascon128v12 17.28 17.46 17.80 ascon80pqv12 20.16 20.34 20.95 T:xoodyakround3 25.58 25.69 26.35 ascon128abi32v12 33.82 34.00 34.51 ascon128bi32v12 37.83 38.07 38.26 romulusn 38.21 38.26 38.32 T:schwaemm256128v2 39.78 40.48 40.71 T:grain128aeadv2 42.92 42.98 43.09 T:schwaemm128128v2 44.26 44.38 44.43 T:schwaemm256256v2 49.64 49.76 49.81 T:schwaemm192192v2 50.00 50.21 50.52 romulusm 54.64 54.88 54.98 T:tinyjambu128v2 55.74 55.91 56.09 T:giftcofb128v1 57.84 57.92 58.09 T:tinyjambu192v2 63.20 63.37 63.77 T:tinyjambu256v2 109.09 109.58 110.16 romulust 137.94 138.27 138.65 T:isapa128av20 207.83 208.31 208.95 T:elephant200v2 330.52 331.65 332.47 T:isapk128av20 513.70 514.94 518.59 T:isapa128v20 1976.40 1977.19 1977.23 T:isapk128v20 2413.73 2421.34 2425.92 T:isapxv20 8650.41 8659.36 8689.83 T:elephant176v2 10706.88 10714.36 10721.64 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.20 9.42 9.88 T:aes128gcmv1 13.87 14.05 14.30 ascon128av12 14.73 14.82 15.00 aes256gcmv1 17.20 17.30 17.41 ascon128v12 17.40 17.45 17.72 ascon80pqv12 19.92 20.08 20.23 T:xoodyakround3 25.80 25.89 26.43 ascon128abi32v12 33.79 33.92 34.60 ascon128bi32v12 38.01 38.15 38.45 romulusn 38.20 38.24 38.73 T:schwaemm256128v2 40.16 40.74 40.95 T:grain128aeadv2 42.97 43.02 43.11 T:schwaemm128128v2 44.30 44.35 44.45 T:schwaemm256256v2 49.59 49.65 49.76 T:schwaemm192192v2 52.13 52.23 52.57 romulusm 54.61 54.71 54.77 T:tinyjambu128v2 56.10 56.27 56.52 T:giftcofb128v1 57.47 57.58 57.71 T:tinyjambu192v2 63.20 63.31 63.63 T:tinyjambu256v2 109.27 109.58 109.84 romulust 138.38 138.80 139.07 T:isapa128av20 208.07 208.27 208.93 T:elephant200v2 329.77 330.66 332.51 T:isapk128av20 513.63 514.25 518.20 T:isapa128v20 1976.84 1977.14 1977.55 T:isapk128v20 2408.53 2410.37 2426.20 T:isapxv20 8649.22 8654.28 8693.76 T:elephant176v2 10704.59 10707.13 10715.80 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.38 9.45 9.54 T:aes128gcmv1 13.75 13.84 13.95 ascon128av12 14.66 14.73 14.79 aes256gcmv1 17.20 17.30 17.39 ascon128v12 17.30 17.35 17.40 ascon80pqv12 20.00 20.19 20.47 T:xoodyakround3 25.83 25.91 26.02 ascon128abi32v12 33.81 33.88 34.00 ascon128bi32v12 38.02 38.19 38.24 romulusn 38.22 38.23 38.28 T:schwaemm256128v2 39.92 40.67 40.80 T:grain128aeadv2 42.83 42.91 42.96 T:schwaemm128128v2 44.27 44.31 44.34 T:schwaemm256256v2 49.54 49.57 49.64 T:schwaemm192192v2 52.22 52.36 52.52 romulusm 54.52 54.56 54.66 T:tinyjambu128v2 56.14 56.29 56.37 T:giftcofb128v1 57.35 57.55 57.72 T:tinyjambu192v2 63.09 63.16 63.36 T:tinyjambu256v2 68.48 68.72 69.15 romulust 87.70 87.88 88.13 T:isapa128av20 207.98 208.25 210.73 T:elephant200v2 220.48 220.90 221.48 T:isapk128av20 271.65 271.95 275.59 T:isapa128v20 1051.09 1051.27 1051.84 T:isapk128v20 1260.56 1261.79 1269.40 T:isapxv20 8651.72 8658.53 8693.06 T:elephant176v2 10707.06 10712.53 10719.98 T:elephant160v2