VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.47 1.48 1.49 T:aes128gcmv1 1.56 1.57 1.58 aes256gcmv1 7.88 7.95 8.14 ascon128av12 11.72 11.79 12.12 ascon128v12 11.76 11.83 11.90 ascon80pqv12 12.13 12.18 12.25 T:xoodyakround3 14.52 14.60 14.71 ascon128abi32v12 17.00 17.05 17.19 T:schwaemm256128v2 20.04 20.18 20.38 T:schwaemm256256v2 20.32 20.36 20.42 T:grain128aeadv2 21.52 21.57 21.62 ascon128bi32v12 22.63 22.73 22.88 T:schwaemm192192v2 24.02 24.15 24.27 T:schwaemm128128v2 27.00 27.06 27.16 T:isapa128av20 32.09 32.10 32.13 T:isapk128av20 37.43 37.52 37.65 romulusn 42.98 43.06 43.21 T:isapa128v20 44.31? 44.39? 50.52? T:giftcofb128v1 58.23 58.42 58.65 romulusm 70.44 70.60 71.03 T:tinyjambu128v2 86.08 86.24 86.27 T:tinyjambu192v2 90.06 90.19 90.54 T:tinyjambu256v2 97.48 98.64 98.93 T:isapk128v20 116.26 116.55 116.73 romulust 142.56 143.19 146.66 T:isapxv20 178.48 178.93 180.60 T:elephant200v2 7420.94 7433.26 7465.64 T:elephant176v2 8258.46 8264.08 8271.69 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.43 1.45 1.46 T:aes128gcmv1 1.46 1.47 1.48 aes256gcmv1 8.00 8.07 8.11 ascon128av12 11.74 11.79 11.82 ascon128v12 11.81 11.84 11.87 ascon80pqv12 12.05 12.11 12.21 T:xoodyakround3 14.60 14.72 14.82 ascon128abi32v12 17.05 17.10 17.28 T:schwaemm256128v2 19.94 20.31 20.45 T:schwaemm256256v2 20.50 20.53 20.59 T:grain128aeadv2 21.68 21.72 21.84 ascon128bi32v12 22.56 22.73 22.85 T:schwaemm192192v2 24.11 24.16 24.31 T:schwaemm128128v2 32.07 32.11 32.16 T:isapk128av20 34.05 34.11 34.23 T:isapa128av20 37.40 37.55 37.66 romulusn 42.99 43.09 43.25 T:isapa128v20 44.32? 44.45? 50.23? T:giftcofb128v1 58.43 58.55 59.22 romulusm 70.50 70.71 70.82 T:tinyjambu128v2 85.64 85.82 86.08 T:tinyjambu192v2 90.17 90.31 90.49 T:tinyjambu256v2 97.48 98.50 98.98 T:isapk128v20 115.71 116.55 117.57 romulust 141.96 143.47 146.70 T:isapxv20 179.01 179.88 180.60 T:elephant200v2 7424.17 7436.47 7471.02 T:elephant176v2 8258.26 8262.75 8267.75 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.45 1.45 1.46 T:aes128gcmv1 1.47 1.47 1.48 aes256gcmv1 8.03 8.06 8.10 ascon128av12 11.74 11.77 11.81 ascon128v12 11.67 11.82 11.87 ascon80pqv12 12.08 12.14 12.44 T:xoodyakround3 14.64 14.74 14.81 ascon128abi32v12 17.08 17.14 17.19 T:schwaemm256128v2 20.12 20.29 20.36 T:schwaemm256256v2 20.48 20.51 20.55 T:grain128aeadv2 21.11 21.24 21.31 T:isapa128v20 21.38 21.43 21.44 T:isapk128av20 21.68 21.73 21.76 ascon128bi32v12 22.40 22.49 22.67 T:isapa128av20 22.54 22.63 22.76 T:schwaemm192192v2 24.06 24.13 24.22 T:schwaemm128128v2 37.40 37.55 37.66 romulusn 39.62 39.83 39.95 romulust 44.33 44.39 45.78 T:giftcofb128v1 58.48 58.63 59.05 romulusm 63.81 64.35 64.89 T:isapk128v20 70.45 70.60 70.74 T:tinyjambu128v2 85.35 85.69 86.86 T:isapxv20 85.80 85.97 86.10 T:tinyjambu192v2 90.12 90.20 90.35 T:tinyjambu256v2 177.83 179.02 180.14 T:elephant200v2 7418.97 7428.78 7455.27 T:elephant176v2 8261.35 8264.64 8267.99 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.87 0.88 0.89 T:aes128gcmv1 0.91 0.93 0.93 aes256gcmv1 7.95 8.02 8.09 ascon128av12 9.30 9.34 9.46 T:xoodyakround3 11.71 11.82 12.00 ascon80pqv12 11.77 11.95 12.08 ascon128v12 14.39 14.43 14.45 ascon128abi32v12 16.83 16.93 16.99 T:schwaemm256128v2 19.92 20.25 20.43 T:schwaemm256256v2 20.41 20.45 20.52 T:grain128aeadv2 21.49 21.55 21.58 ascon128bi32v12 22.45 22.51 22.66 T:schwaemm192192v2 23.86 23.90 23.94 T:schwaemm128128v2 24.97 25.01 25.05 T:isapa128av20 26.74 26.75 26.79 T:isapk128av20 29.02 29.07 29.16 romulusn 32.08 32.15 32.24 T:isapa128v20 39.43 39.70 39.86 romulusm 44.31 44.36 44.42 T:giftcofb128v1 57.66 57.75 57.88 T:tinyjambu128v2 67.07 67.22 67.35 T:tinyjambu192v2 68.00 68.11 68.23 T:tinyjambu256v2 76.37 77.16 78.32 T:isapk128v20 77.91 78.30 78.64 romulust 112.54 113.78 115.27 T:isapxv20 133.35 133.61 134.33 T:elephant200v2 5541.52 5552.17 5573.16 T:elephant176v2 6208.10 6224.71 6278.71 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.85 0.87 0.89 T:aes128gcmv1 0.85 0.91 0.92 aes256gcmv1 8.01 8.05 8.08 ascon128av12 9.25 9.33 9.45 T:xoodyakround3 11.72 11.76 11.94 ascon128v12 11.71 11.78 11.92 ascon80pqv12 14.43 14.50 14.52 ascon128abi32v12 16.90 16.97 17.04 T:schwaemm256128v2 19.97 20.23 20.35 T:schwaemm256256v2 20.49 20.52 20.56 T:grain128aeadv2 21.56 21.65 21.71 ascon128bi32v12 22.45 22.50 22.63 T:schwaemm192192v2 23.80 23.91 24.24 T:schwaemm128128v2 26.75 26.76 26.84 T:isapk128av20 28.43 28.48 28.51 T:isapa128av20 29.02 29.07 29.11 romulusn 32.13 32.17 32.23 T:isapa128v20 39.52 39.75 39.86 romulusm 44.30 44.33 44.43 T:giftcofb128v1 57.69 57.83 57.92 T:tinyjambu128v2 67.03 67.31 67.45 T:tinyjambu192v2 68.05 68.17 68.29 T:tinyjambu256v2 76.33 76.84 77.26 T:isapk128v20 78.24 78.41 78.74 romulust 112.61 114.33 114.61 T:isapxv20 133.21 133.94 134.46 T:elephant200v2 5548.02 5558.37 5580.34 T:elephant176v2 6210.25 6217.64 6233.37 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.86 0.87 0.88 T:aes128gcmv1 0.88 0.91 0.91 aes256gcmv1 8.00 8.03 8.05 ascon128av12 9.24 9.28 9.46 T:xoodyakround3 11.72 11.76 11.84 ascon80pqv12 11.70 11.77 11.93 ascon128v12 14.46 14.51 14.55 ascon128abi32v12 16.89 16.97 17.08 T:schwaemm256128v2 19.94 20.13 20.46 T:schwaemm256256v2 20.49 20.52 20.55 T:grain128aeadv2 21.19 21.24 21.29 T:isapa128v20 21.39 21.41 21.44 T:isapk128av20 21.60 21.68 21.82 ascon128bi32v12 22.39 22.54 22.73 T:schwaemm192192v2 22.61 22.66 22.69 T:isapa128av20 23.81 23.90 24.03 T:schwaemm128128v2 29.04 29.07 29.19 romulusn 39.51 39.76 39.98 romulusm 39.67 40.05 40.31 romulust 44.31 44.34 44.37 T:giftcofb128v1 57.76 57.84 57.96 T:tinyjambu128v2 59.45 59.75 60.29 T:isapk128v20 67.02 67.19 67.32 T:tinyjambu192v2 68.06 68.13 68.27 T:tinyjambu256v2 84.54 85.00 85.50 T:isapxv20 132.84 133.68 134.34 T:elephant200v2 5546.51 5557.51 5583.07 T:elephant176v2 6208.94 6216.30 6232.84 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.25? 0.27? 0.29? aes256gcmv1 0.26? 0.29? 0.30? T:aes128gcmv1 6.34 6.40 6.45 T:xoodyakround3 7.98 8.02 8.06 ascon128av12 11.55 11.64 11.73 ascon80pqv12 11.65 11.69 11.95 ascon128v12 14.37 14.46 14.52 ascon128abi32v12 16.66 16.76 16.85 T:schwaemm256128v2 19.84 20.01 20.26 T:schwaemm256256v2 20.44 20.48 20.52 T:grain128aeadv2 20.70 20.80 20.94 romulusn 20.82 20.94 21.06 romulusm 21.13 21.22 21.31 T:isapa128v20 21.38 21.41 21.46 T:isapk128av20 21.44 21.50 21.59 ascon128bi32v12 22.04 22.14 22.20 T:schwaemm192192v2 22.85 22.92 23.16 T:isapa128av20 23.63 23.76 23.85 T:schwaemm128128v2 38.91 39.20 39.62 romulust 44.29 44.32 44.40 T:giftcofb128v1 44.94 45.03 45.06 T:tinyjambu128v2 45.77 45.81 45.90 T:tinyjambu256v2 48.26 48.38 48.42 T:tinyjambu192v2 55.10 55.48 56.31 T:isapk128v20 84.23 84.90 85.51 T:isapxv20 88.91 89.24 89.66 T:elephant200v2 3668.40 3676.16 3695.98 T:elephant176v2 4126.84 4129.54 4132.91 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.24? 0.27? 0.29? aes256gcmv1 0.25? 0.27? 0.29? T:aes128gcmv1 6.36 6.41 6.43 T:xoodyakround3 7.97 8.00 8.07 ascon128av12 11.59 11.66 11.69 ascon128v12 11.63 12.00 12.10 ascon80pqv12 14.29 14.42 14.55 ascon128abi32v12 16.70 16.78 16.87 T:schwaemm256128v2 19.92 20.10 20.37 T:schwaemm256256v2 20.45 20.48 20.52 T:grain128aeadv2 20.70 20.80 20.88 romulusn 20.71 20.87 20.94 romulusm 21.19 21.26 21.31 T:isapa128v20 21.38 21.42 21.43 T:isapk128av20 21.42 21.49 21.52 ascon128bi32v12 22.06 22.11 22.23 T:schwaemm192192v2 22.83 22.91 22.96 T:isapa128av20 23.62 23.72 23.91 T:schwaemm128128v2 39.00 39.22 39.48 romulust 44.25 44.28 44.33 T:giftcofb128v1 44.85 44.91 44.97 T:tinyjambu128v2 45.77 45.84 45.88 T:tinyjambu256v2 48.17 48.29 48.41 T:tinyjambu192v2 55.05 55.31 56.28 T:isapk128v20 84.33 84.61 85.67 T:isapxv20 89.06 89.64 90.04 T:elephant200v2 3671.82 3679.59 3689.35 T:elephant176v2 4126.29 4129.06 4132.01 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.27 0.28 0.29 aes256gcmv1 0.27 0.28 0.29 T:aes128gcmv1 6.37 6.41 6.45 T:xoodyakround3 7.97 8.01 8.03 ascon128av12 11.55 11.66 11.98 ascon80pqv12 11.64 11.66 11.72 ascon128v12 14.32 14.43 14.51 ascon128abi32v12 16.74 16.85 16.94 T:schwaemm256128v2 19.86 20.00 20.21 T:schwaemm256256v2 20.45 20.49 20.54 T:grain128aeadv2 20.73 20.81 20.99 romulusn 20.74 20.91 20.98 romulusm 21.17 21.21 21.28 T:isapa128v20 21.39 21.42 21.46 T:isapk128av20 21.43 21.49 21.56 ascon128bi32v12 22.11 22.22 22.30 T:schwaemm192192v2 22.82 22.89 23.14 T:isapa128av20 23.61 23.68 23.80 T:schwaemm128128v2 39.19 39.36 39.58 romulust 44.26 44.30 44.36 T:giftcofb128v1 44.83 44.98 45.19 T:tinyjambu128v2 45.78 45.83 45.94 T:tinyjambu256v2 48.31 48.40 48.45 T:tinyjambu192v2 55.08 55.56 55.87 T:isapk128v20 84.15 84.57 85.26 T:isapxv20 89.01 89.63 90.41 T:elephant200v2 3665.91 3676.42 3691.77 T:elephant176v2 4126.23 4129.35 4131.58 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.00 1.00 1.01 T:aes128gcmv1 1.07 1.07 1.08 aes256gcmv1 8.16 8.17 8.27 ascon128av12 9.37 9.42 9.50 T:xoodyakround3 11.97 12.03 12.23 ascon128v12 11.97 12.06 12.29 ascon80pqv12 14.70 14.71 14.74 ascon128abi32v12 17.40 17.43 17.52 T:schwaemm256128v2 20.50 20.60 20.80 T:schwaemm256256v2 20.74 20.75 20.78 T:grain128aeadv2 21.84 21.88 21.94 ascon128bi32v12 22.93 23.00 23.13 T:schwaemm192192v2 24.10 24.19 24.23 T:schwaemm128128v2 27.04 27.07 27.10 T:isapa128av20 29.33 29.35 29.48 romulusn 29.81 29.82 29.83 T:isapk128av20 39.73 39.82 39.89 romulusm 44.74 44.77 44.80 T:giftcofb128v1 46.77 46.84 46.97 T:isapa128v20 58.10 58.17 58.28 T:tinyjambu128v2 67.72 67.76 67.88 T:tinyjambu192v2 68.41 68.44 68.64 T:tinyjambu256v2 78.64 78.88 79.25 romulust 127.50 127.73 127.98 T:isapk128v20 136.28 136.81 137.64 T:elephant200v2 188.16 188.81 189.93 T:isapxv20 5590.41 5604.11 5615.65 T:elephant176v2 6266.01 6268.42 6273.09 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.99 0.99 1.01 T:aes128gcmv1 1.02 1.03 1.06 aes256gcmv1 8.22 8.23 8.31 ascon128av12 9.36 9.44 9.67 T:xoodyakround3 11.98 12.01 12.13 ascon128v12 12.00 12.01 12.05 ascon80pqv12 14.82 14.87 14.96 ascon128abi32v12 17.34 17.42 17.47 T:schwaemm256128v2 20.43 20.57 20.90 T:schwaemm256256v2 20.85 20.86 20.90 T:grain128aeadv2 21.91 21.93 22.05 ascon128bi32v12 22.94 22.98 23.11 T:schwaemm192192v2 24.23 24.29 24.33 T:schwaemm128128v2 29.29 29.34 29.38 romulusn 29.81 29.81 29.83 T:isapk128av20 30.44 30.46 30.54 T:isapa128av20 39.85 39.94 40.10 romulusm 44.77 44.80 44.83 T:giftcofb128v1 46.79 46.85 47.04 T:isapa128v20 58.13 58.20 58.32 T:tinyjambu128v2 67.70 67.78 67.83 T:tinyjambu192v2 68.46 68.50 68.56 T:tinyjambu256v2 78.87 79.10 79.18 romulust 127.38 127.74 128.03 T:isapk128v20 135.95 136.77 137.63 T:elephant200v2 187.84 187.91 188.48 T:isapxv20 5593.73 5596.89 5601.92 T:elephant176v2 6265.44 6268.92 6270.41 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.99 0.99 1.00 T:aes128gcmv1 1.02 1.02 1.06 aes256gcmv1 8.22 8.23 8.25 ascon128av12 9.36 9.39 9.45 T:xoodyakround3 11.98 12.02 12.06 ascon80pqv12 12.00 12.13 12.22 ascon128v12 14.81 14.83 14.91 ascon128abi32v12 17.40 17.44 17.58 T:schwaemm256128v2 20.53 20.62 20.79 T:schwaemm256256v2 20.82 20.85 20.86 T:grain128aeadv2 21.87 21.89 21.93 ascon128bi32v12 22.90 22.96 23.03 T:schwaemm192192v2 23.19 23.20 23.22 T:isapk128av20 23.76 23.79 23.82 T:isapa128av20 24.14 24.18 24.28 T:schwaemm128128v2 28.67 28.71 28.74 T:isapa128v20 29.29 29.35 29.62 romulusn 39.85 39.96 40.03 romulusm 40.45 40.65 40.78 romulust 44.76 44.78 44.80 T:giftcofb128v1 58.10 58.22 58.28 T:tinyjambu128v2 67.51 67.66 67.84 T:tinyjambu192v2 68.44 68.53 68.69 T:tinyjambu256v2 86.19 86.43 86.67 T:isapk128v20 122.65 123.00 123.51 T:isapxv20 136.77 137.00 138.28 T:elephant200v2 5588.06 5594.49 5607.91 T:elephant176v2 6266.14 6270.27 6270.95 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.97 6.03 6.08 T:aes128gcmv1 6.34 6.38 6.45 aes256gcmv1 12.31 12.38 12.94 ascon128av12 13.51 13.58 14.17 T:xoodyakround3 17.52 17.77 17.93 ascon128v12 17.78 18.02 18.34 ascon80pqv12 21.72 21.88 22.45 ascon128abi32v12 28.14 28.57 29.13 T:schwaemm256128v2 28.66 28.73 28.79 T:grain128aeadv2 28.77 28.93 29.08 ascon128bi32v12 30.75 31.05 31.59 T:schwaemm128128v2 32.73 33.04 33.37 T:schwaemm256256v2 35.37 35.54 36.84 romulusn 36.45 37.01 37.62 T:schwaemm192192v2 46.83 47.04 47.78 romulusm 54.00 54.34 54.87 T:giftcofb128v1 67.46 67.57 68.05 T:tinyjambu128v2 73.88 74.21 74.77 T:isapa128av20 78.32 78.55 78.75 T:tinyjambu192v2 79.23 79.49 80.06 T:tinyjambu256v2 95.41 95.51 95.59 T:isapk128av20 104.41 104.76 105.70 romulust 192.79 193.52 194.46 T:elephant200v2 383.18 383.91 384.91 T:isapa128v20 1268.29 1269.98 1274.20 T:isapk128v20 1848.49 1873.19 1877.44 T:isapxv20 6950.48 6963.73 6980.10 T:elephant176v2 8377.14 8385.78 8406.70 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.23 5.29 5.34 T:aes128gcmv1 6.12 6.20 6.27 aes256gcmv1 12.34 12.51 13.43 ascon128av12 13.42 13.55 13.98 T:xoodyakround3 17.33 17.52 17.98 ascon128v12 17.27 17.74 18.05 ascon80pqv12 21.97 22.20 23.09 ascon128abi32v12 27.77 28.11 28.82 T:schwaemm256128v2 28.70 28.84 29.28 T:grain128aeadv2 28.94 29.05 29.37 ascon128bi32v12 30.97 31.40 31.68 T:schwaemm128128v2 33.11 33.34 33.54 T:schwaemm256256v2 35.59 35.73 35.84 romulusn 36.69 36.92 37.54 T:schwaemm192192v2 48.06 48.24 49.45 romulusm 54.26 54.45 54.62 T:giftcofb128v1 67.71 67.93 68.20 T:tinyjambu128v2 76.09 76.45 77.36 T:isapa128av20 78.63 78.77 78.95 T:tinyjambu192v2 79.50 79.57 79.70 T:tinyjambu256v2 95.62 95.77 95.88 T:isapk128av20 104.73 105.55 105.98 romulust 192.38 192.96 193.75 T:elephant200v2 384.67 385.06 385.50 T:isapa128v20 1269.06 1270.38 1274.24 T:isapk128v20 1848.55 1874.57 1882.35 T:isapxv20 6956.00 7001.05 7005.66 T:elephant176v2 8382.45 8388.86 8408.45 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.24 5.26 5.30 T:aes128gcmv1 6.13 6.18 6.25 aes256gcmv1 12.30 12.38 12.98 ascon128av12 13.55 13.99 14.12 T:xoodyakround3 17.30 17.44 17.53 ascon80pqv12 17.33 17.53 17.73 ascon128v12 21.95 22.26 22.48 ascon128abi32v12 27.73 27.98 28.31 T:schwaemm256128v2 28.73 28.90 29.06 T:grain128aeadv2 28.92 28.96 29.06 ascon128bi32v12 30.87 31.03 31.52 T:schwaemm128128v2 32.78 32.93 33.41 T:schwaemm256256v2 35.55 35.76 35.88 romulusn 36.58 36.95 37.44 T:schwaemm192192v2 48.02 48.34 48.62 romulusm 49.63 49.92 50.48 T:isapa128av20 54.23 54.59 54.80 T:giftcofb128v1 60.28 60.56 60.80 T:isapk128av20 65.98 66.35 67.26 romulust 67.72 67.81 68.06 T:tinyjambu128v2 78.38 78.53 78.80 T:tinyjambu192v2 79.34 79.45 79.73 T:tinyjambu256v2 192.08 193.16 194.12 T:elephant200v2 200.08 200.55 201.02 T:isapa128v20 668.86 670.03 670.94 T:isapk128v20 967.36 980.39 981.54 T:isapxv20 6947.90 6957.02 7009.71 T:elephant176v2 8381.76 8392.71 8412.84 T:elephant160v2