VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20260217

[Page version: 20260315 18:26:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.19 1.20 1.21 T:aes128gcmv1 1.43 1.43 1.45 aes256gcmv1 7.56 7.59 7.61 ascon128av12 10.87 10.90 10.93 ascon128v12 10.87 10.90 10.93 ascon80pqv12 13.85 14.09 14.18 ascon128abi32v12 15.71 15.74 15.78 T:xoodyakround3 17.72 17.77 17.81 T:schwaemm256128v2 20.74 20.76 20.80 ascon128bi32v12 23.15 23.23 23.79 T:schwaemm256256v2 23.36 23.41 23.49 T:schwaemm192192v2 24.23 24.25 24.27 T:grain128aeadv2 25.68 25.74 25.79 T:schwaemm128128v2 33.65 33.70 33.74 T:giftcofb128v1 37.59 38.10 38.21 romulusn 40.64 40.71 40.78 T:isapa128av20 42.78 42.88 42.94 T:isapa128v20 60.27 60.36 60.52 romulusm 67.89 67.91 68.00 T:tinyjambu128v2 67.90 68.06 68.19 T:isapk128av20 83.50 83.50 83.50 T:tinyjambu192v2 89.30 89.34 89.46 T:tinyjambu256v2 90.45 90.63 90.87 T:isapk128v20 128.30 128.39 128.59 romulust 165.52 168.07 168.44 T:isapxv20 171.10 171.22 172.07 T:elephant200v2 6818.80 6821.09 6825.49 T:elephant176v2 7979.86 7982.78 7984.90 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.41 1.43 1.44 aes256gcmv1 7.37 7.40 7.42 ascon128av12 10.87 10.89 10.92 ascon128v12 10.87 10.89 10.91 ascon80pqv12 13.75 13.85 13.89 ascon128abi32v12 15.44 15.50 15.56 T:xoodyakround3 17.73 17.76 17.82 T:schwaemm256128v2 21.04 21.06 21.09 ascon128bi32v12 23.14 23.22 23.82 T:schwaemm256256v2 23.37 23.42 23.48 T:schwaemm192192v2 24.64 24.66 24.68 T:grain128aeadv2 25.78 25.82 25.88 T:schwaemm128128v2 33.80 33.84 33.88 T:giftcofb128v1 37.83 37.87 37.90 romulusn 40.61 40.67 40.75 T:isapa128av20 42.79 42.84 42.93 T:isapa128v20 60.49 60.56 60.64 romulusm 68.00 68.03 68.09 T:tinyjambu128v2 67.92 68.04 68.17 T:isapk128av20 83.08 83.09 83.15 T:tinyjambu192v2 89.25 89.26 89.32 T:tinyjambu256v2 90.42 90.63 90.80 T:isapk128v20 128.30 128.37 128.48 romulust 165.68 166.30 168.27 T:isapxv20 171.04 171.20 172.08 T:elephant200v2 6819.11 6821.30 6825.11 T:elephant176v2 7980.78 7983.26 7985.70 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.05 1.06 T:aes128gcmv1 1.41 1.42 1.43 aes256gcmv1 7.38 7.40 7.42 ascon128av12 10.86 10.88 10.90 ascon80pqv12 10.86 10.89 10.91 ascon128v12 13.80 13.86 13.92 ascon128abi32v12 15.51 15.56 15.60 T:xoodyakround3 17.72 17.78 17.84 T:schwaemm256128v2 21.04 21.07 21.09 ascon128bi32v12 21.41 21.46 21.51 T:isapa128v20 23.14 23.21 23.82 T:schwaemm256256v2 23.35 23.43 23.49 T:schwaemm192192v2 24.64 24.65 24.68 T:grain128aeadv2 25.77 25.82 25.88 T:schwaemm128128v2 27.43 27.48 27.53 T:isapa128av20 33.76 33.82 33.87 T:giftcofb128v1 37.83 37.87 37.91 romulusn 43.84 43.90 43.96 romulust 45.15 45.26 45.38 T:isapk128av20 56.29 56.49 56.66 T:isapk128v20 60.47 60.54 60.63 romulusm 68.00 68.02 68.18 T:tinyjambu128v2 83.07 83.22 83.50 T:tinyjambu192v2 89.25 89.26 89.38 T:tinyjambu256v2 97.91 98.19 99.32 T:isapxv20 171.05 171.21 172.04 T:elephant200v2 6820.11 6822.28 6826.71 T:elephant176v2 7980.52 7982.89 7986.20 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.81 0.81 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 7.46 7.48 7.50 ascon128av12 10.87 10.91 10.92 ascon128v12 10.90 10.92 10.94 ascon80pqv12 11.87 11.89 11.92 T:xoodyakround3 14.05 14.08 14.10 ascon128abi32v12 17.61 17.64 17.66 T:schwaemm256128v2 20.71 20.88 21.01 ascon128bi32v12 23.05 23.20 23.81 T:schwaemm256256v2 23.16 23.21 23.25 T:schwaemm192192v2 24.23 24.25 24.26 T:grain128aeadv2 25.61 25.64 25.67 T:schwaemm128128v2 30.34 30.48 30.56 romulusn 32.17 32.20 32.24 T:isapa128v20 34.06 34.09 34.13 T:isapa128av20 34.25 34.28 34.30 T:giftcofb128v1 41.61 41.69 41.76 romulusm 55.52 55.55 55.57 T:tinyjambu128v2 56.48 56.55 56.64 T:isapk128av20 63.30 63.45 63.45 T:tinyjambu192v2 67.41 67.42 67.43 T:tinyjambu256v2 73.37 73.49 73.58 T:isapk128v20 86.00 86.06 86.15 romulust 127.77 127.79 127.81 T:elephant200v2 132.57 133.11 133.45 T:isapxv20 5093.68 5095.57 5097.67 T:elephant176v2 5983.44 5984.50 5985.92 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.73 0.74 0.74 T:aes128gcmv1 0.91 0.92 0.93 aes256gcmv1 7.37 7.40 7.42 ascon128av12 10.84 10.87 10.89 ascon128v12 10.88 10.90 10.92 ascon80pqv12 11.75 11.77 11.80 T:xoodyakround3 13.89 13.91 13.95 ascon128abi32v12 17.62 17.65 17.69 T:schwaemm256128v2 20.81 20.94 21.05 ascon128bi32v12 23.05 23.17 23.78 T:schwaemm256256v2 23.18 23.22 23.27 T:schwaemm192192v2 24.41 24.45 24.48 T:grain128aeadv2 25.63 25.66 25.70 T:schwaemm128128v2 30.32 30.36 30.41 romulusn 32.17 32.20 32.24 T:isapa128v20 34.05 34.09 34.14 T:isapa128av20 34.33 34.36 34.39 T:giftcofb128v1 41.68 41.74 41.83 romulusm 55.56 55.60 55.63 T:tinyjambu128v2 56.53 56.59 56.64 T:isapk128av20 63.33 63.50 63.52 T:tinyjambu192v2 67.38 67.38 67.40 T:tinyjambu256v2 73.36 73.47 73.55 T:isapk128v20 85.98 86.03 86.10 romulust 127.78 127.80 127.82 T:elephant200v2 132.91 133.29 133.74 T:isapxv20 5093.66 5096.14 5098.10 T:elephant176v2 5983.78 5985.04 5988.37 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.74 0.74 T:aes128gcmv1 0.92 0.92 0.93 aes256gcmv1 7.37 7.39 7.41 ascon128av12 10.85 10.87 10.89 ascon128v12 10.87 10.89 10.92 ascon80pqv12 11.80 11.82 11.85 T:xoodyakround3 13.90 13.92 13.96 ascon128abi32v12 17.61 17.64 17.69 T:schwaemm256128v2 20.81 20.91 21.02 ascon128bi32v12 21.47 21.50 21.54 T:isapa128v20 23.05 23.14 23.75 T:schwaemm256256v2 23.18 23.22 23.25 T:schwaemm192192v2 24.41 24.45 24.48 T:grain128aeadv2 25.64 25.67 25.69 T:schwaemm128128v2 27.45 27.47 27.50 T:isapa128av20 30.31 30.36 30.40 romulusn 34.33 34.36 34.38 T:giftcofb128v1 41.67 41.76 41.83 romulusm 43.76 43.80 43.87 romulust 45.09 45.16 45.22 T:isapk128av20 55.56 55.57 55.60 T:tinyjambu128v2 56.32 56.40 56.53 T:isapk128v20 63.33 63.40 63.52 T:tinyjambu192v2 67.38 67.38 67.38 T:tinyjambu256v2 98.56 98.84 99.16 T:isapxv20 127.79 127.81 127.83 T:elephant200v2 5093.59 5095.89 5097.48 T:elephant176v2 5983.11 5984.42 5987.60 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.42 0.42 T:aes128gcmv1 0.41 0.43 0.43 aes256gcmv1 7.35 7.37 7.39 ascon128av12 8.09 8.13 8.16 T:xoodyakround3 10.85 10.89 10.92 ascon128v12 10.91 10.93 10.95 ascon80pqv12 13.84 13.93 13.96 ascon128abi32v12 17.49 17.53 17.59 T:schwaemm256128v2 20.87 21.02 21.06 ascon128bi32v12 21.45 21.51 21.56 T:isapa128v20 22.84 22.90 22.97 romulusn 22.93 22.99 23.05 T:schwaemm192192v2 22.93 23.00 23.60 T:schwaemm256256v2 23.03 23.11 23.19 romulusm 24.22 24.23 24.25 T:grain128aeadv2 25.47 25.51 25.56 T:schwaemm128128v2 27.42 27.47 27.52 T:isapa128av20 34.86 34.91 34.96 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.39 43.39 43.40 T:tinyjambu192v2 43.58 43.62 43.67 romulust 44.81 44.91 45.04 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.08 56.30 56.65 T:isapk128v20 84.80 84.84 84.90 T:elephant200v2 97.84 98.98 99.29 T:isapxv20 3365.86 3368.04 3371.23 T:elephant176v2 3985.10 3987.94 3989.75 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.41 0.42 0.42 T:aes128gcmv1 0.41 0.42 0.43 aes256gcmv1 7.34 7.37 7.40 ascon128av12 8.09 8.12 8.15 T:xoodyakround3 10.82 10.84 10.86 ascon128v12 10.88 10.91 10.94 ascon80pqv12 13.82 13.92 13.95 ascon128abi32v12 17.47 17.53 17.57 T:schwaemm256128v2 20.55 20.79 21.02 ascon128bi32v12 21.46 21.52 21.56 T:isapa128v20 22.85 22.95 23.03 romulusn 22.93 23.01 23.61 T:schwaemm256256v2 22.96 23.02 23.07 T:schwaemm192192v2 22.90 23.09 23.12 romulusm 24.13 24.23 24.25 T:grain128aeadv2 25.48 25.53 25.62 T:schwaemm128128v2 27.40 27.46 27.50 T:isapa128av20 34.86 34.90 34.95 T:giftcofb128v1 43.13 43.14 43.15 T:tinyjambu128v2 43.50 43.50 43.52 T:tinyjambu192v2 43.57 43.64 43.70 romulust 44.86 44.95 45.05 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.15 56.35 56.95 T:isapk128v20 84.82 84.85 84.94 T:elephant200v2 98.05 98.57 99.47 T:isapxv20 3365.80 3367.79 3371.53 T:elephant176v2 3985.02 3987.70 3988.74 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 7.34 7.38 7.41 ascon128av12 8.10 8.12 8.15 T:xoodyakround3 10.81 10.83 10.86 ascon128v12 10.87 10.91 10.93 ascon80pqv12 13.81 13.92 13.94 ascon128abi32v12 17.47 17.52 17.57 T:schwaemm256128v2 20.54 20.61 20.85 ascon128bi32v12 21.49 21.54 21.60 T:isapa128v20 22.84 22.92 22.98 romulusn 22.93 23.01 23.62 T:schwaemm256256v2 22.96 23.01 23.08 T:schwaemm192192v2 22.86 23.06 23.11 romulusm 24.13 24.22 24.24 T:grain128aeadv2 25.47 25.53 25.58 T:schwaemm128128v2 27.40 27.44 27.50 T:isapa128av20 34.87 34.90 34.94 T:giftcofb128v1 43.14 43.14 43.15 T:tinyjambu128v2 43.51 43.52 43.52 T:tinyjambu192v2 43.59 43.65 43.72 romulust 44.85 44.93 45.03 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.06 56.32 58.23 T:isapk128v20 84.83 84.88 84.94 T:elephant200v2 98.01 98.54 99.35 T:isapxv20 3365.71 3368.30 3370.89 T:elephant176v2 3985.19 3987.95 3989.74 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.96 0.96 0.97 T:aes128gcmv1 1.11 1.11 1.12 aes256gcmv1 7.65 7.67 7.69 ascon128av12 11.06 11.08 11.09 ascon128v12 11.08 11.09 11.11 ascon80pqv12 12.01 12.02 12.04 T:xoodyakround3 14.37 14.39 14.41 ascon128abi32v12 18.17 18.19 18.22 T:schwaemm256128v2 21.13 21.21 21.26 ascon128bi32v12 23.73 23.75 23.77 T:schwaemm192192v2 23.74 23.76 24.35 T:schwaemm256256v2 24.64 24.65 24.67 T:grain128aeadv2 25.99 26.01 26.03 T:schwaemm128128v2 30.61 30.71 30.81 romulusn 34.58 34.61 34.64 T:giftcofb128v1 36.23 36.26 36.30 T:isapa128av20 41.97 42.05 42.12 romulusm 47.23 47.26 47.29 T:isapa128v20 55.93 55.96 55.99 T:tinyjambu128v2 63.68 63.90 63.90 T:tinyjambu192v2 64.00 64.06 64.14 T:isapk128av20 67.90 67.91 67.92 T:tinyjambu256v2 87.35 87.40 87.49 romulust 128.23 128.29 128.38 T:isapk128v20 130.47 130.49 130.51 T:elephant200v2 215.39 215.83 216.06 T:isapxv20 5132.79 5133.83 5135.92 T:elephant176v2 6049.92 6051.67 6053.03 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.89 0.89 0.89 T:aes128gcmv1 1.10 1.11 1.11 aes256gcmv1 7.55 7.57 7.59 ascon128av12 11.03 11.04 11.06 ascon128v12 11.06 11.07 11.09 ascon80pqv12 11.90 11.91 11.93 T:xoodyakround3 14.21 14.23 14.26 ascon128abi32v12 18.17 18.20 18.23 T:schwaemm256128v2 21.14 21.30 21.46 ascon128bi32v12 23.72 23.74 24.31 T:schwaemm256256v2 23.72 23.75 23.79 T:schwaemm192192v2 24.83 24.86 24.88 T:grain128aeadv2 25.99 26.01 26.04 T:schwaemm128128v2 30.65 30.69 30.73 romulusn 34.68 34.70 34.72 T:giftcofb128v1 36.26 36.29 36.32 T:isapa128av20 42.08 42.15 42.21 romulusm 47.22 47.25 47.28 T:isapa128v20 55.96 55.97 56.00 T:tinyjambu128v2 63.86 63.96 63.96 T:tinyjambu192v2 64.04 64.10 64.16 T:isapk128av20 67.87 67.87 67.87 T:tinyjambu256v2 87.33 87.38 87.43 romulust 128.25 128.35 128.43 T:isapk128v20 130.48 130.49 130.51 T:elephant200v2 215.04 215.94 216.07 T:isapxv20 5132.52 5134.45 5136.19 T:elephant176v2 6050.02 6051.33 6053.83 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.89 0.89 0.89 T:aes128gcmv1 1.10 1.11 1.11 aes256gcmv1 7.55 7.58 7.60 ascon128av12 11.02 11.04 11.05 ascon128v12 11.06 11.07 11.09 ascon80pqv12 11.93 11.95 11.97 T:xoodyakround3 14.21 14.24 14.29 ascon128abi32v12 18.17 18.20 18.23 T:schwaemm256128v2 21.22 21.36 21.55 ascon128bi32v12 23.72 23.74 24.30 T:schwaemm256256v2 23.71 23.75 23.78 T:schwaemm192192v2 24.82 24.86 24.88 T:grain128aeadv2 25.99 26.02 26.05 T:schwaemm128128v2 28.70 28.72 28.75 T:isapa128av20 29.15 29.17 29.19 T:isapa128v20 30.63 30.66 30.72 romulusn 34.67 34.71 34.73 T:giftcofb128v1 42.11 42.18 42.22 romulusm 45.03 45.06 45.13 romulust 49.45 49.52 49.59 T:isapk128av20 55.98 55.99 56.00 T:tinyjambu128v2 63.81 63.91 63.96 T:tinyjambu192v2 67.87 67.87 67.87 T:tinyjambu256v2 84.50 84.56 84.63 T:isapk128v20 130.47 130.49 130.50 T:elephant200v2 140.92 141.12 141.38 T:isapxv20 5132.84 5134.47 5135.99 T:elephant176v2 6049.73 6051.73 6053.80 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.93 5.98 6.06 T:aes128gcmv1 7.84 7.88 7.94 aes256gcmv1 11.61 11.70 11.92 ascon128av12 14.70 14.78 14.99 ascon128v12 14.80 14.88 15.17 ascon80pqv12 17.36 17.44 17.52 T:xoodyakround3 21.38 21.49 21.73 ascon128abi32v12 27.80 27.85 28.09 ascon128bi32v12 29.43 29.53 29.76 T:schwaemm256128v2 33.42 33.65 33.86 T:schwaemm128128v2 34.12 34.18 34.25 T:grain128aeadv2 36.67 36.76 36.93 romulusn 37.54 37.73 38.64 T:schwaemm256256v2 38.15 38.45 38.69 T:schwaemm192192v2 42.09 42.19 42.35 T:giftcofb128v1 49.73 50.00 50.23 romulusm 65.49 65.51 65.57 T:tinyjambu128v2 74.31 74.33 74.34 T:tinyjambu192v2 79.07 79.10 79.17 T:tinyjambu256v2 85.91 86.16 86.42 T:isapa128av20 117.68 117.94 118.40 romulust 184.56 184.85 185.57 T:elephant200v2 221.89 222.89 224.23 T:isapk128av20 392.37 392.85 393.33 T:isapa128v20 1369.12 1369.94 1370.64 T:isapk128v20 2081.37 2087.93 2097.55 T:isapxv20 6387.75 6389.35 6390.96 T:elephant176v2 8097.13 8098.71 8100.58 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.92 5.97 6.03 T:aes128gcmv1 8.04 8.08 8.12 aes256gcmv1 11.58 11.65 11.91 ascon128av12 14.80 14.87 15.06 ascon128v12 14.82 14.89 15.12 ascon80pqv12 17.21 17.32 17.41 T:xoodyakround3 21.11 21.26 21.54 ascon128abi32v12 28.05 28.15 28.49 ascon128bi32v12 29.35 29.63 30.16 T:schwaemm256128v2 33.22 33.42 33.64 T:schwaemm128128v2 34.29 34.35 34.42 T:grain128aeadv2 36.65 36.77 36.92 romulusn 37.65 37.86 38.64 T:schwaemm256256v2 38.16 38.46 38.65 T:schwaemm192192v2 42.25 42.39 42.54 T:giftcofb128v1 51.43 51.61 51.72 romulusm 65.60 65.62 65.64 T:tinyjambu128v2 74.27 74.46 74.48 T:tinyjambu192v2 79.12 79.15 79.23 T:tinyjambu256v2 85.88 86.03 86.31 T:isapa128av20 117.73 117.92 118.06 romulust 184.45 184.64 185.42 T:elephant200v2 222.80 223.76 224.49 T:isapk128av20 392.56 392.97 393.31 T:isapa128v20 1369.91 1370.87 1372.53 T:isapk128v20 2088.26 2090.11 2101.70 T:isapxv20 6387.69 6389.32 6390.49 T:elephant176v2 8097.58 8099.04 8101.41 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.92 5.95 5.99 T:aes128gcmv1 8.10 8.13 8.17 aes256gcmv1 11.56 11.65 11.78 ascon128av12 14.76 14.83 14.93 ascon128v12 14.81 14.90 14.99 ascon80pqv12 17.30 17.38 17.51 T:xoodyakround3 21.12 21.26 21.44 ascon128abi32v12 28.04 28.10 28.36 ascon128bi32v12 29.42 29.63 30.08 T:schwaemm256128v2 33.25 33.46 33.65 T:schwaemm128128v2 34.25 34.29 34.36 T:grain128aeadv2 36.66 36.75 36.86 romulusn 37.48 37.67 38.46 T:schwaemm256256v2 38.08 38.34 38.58 T:schwaemm192192v2 42.21 42.33 42.48 T:giftcofb128v1 51.31 51.51 51.66 romulusm 57.24 57.39 57.64 T:isapa128av20 65.62 65.63 65.64 T:tinyjambu128v2 73.58 73.73 73.89 romulust 74.12 74.16 74.29 T:tinyjambu192v2 79.11 79.13 79.16 T:tinyjambu256v2 137.69 138.20 138.89 T:isapk128av20 184.45 184.68 185.48 T:elephant200v2 204.49 204.85 205.22 T:isapa128v20 716.90 717.72 718.53 T:isapk128v20 1092.81 1093.70 1099.31 T:isapxv20 6388.58 6390.42 6391.76 T:elephant176v2 8098.47 8099.92 8101.59 T:elephant160v2