VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.78 1.79 1.80 T:aes128gcmv1 2.14 2.15 2.17 aes256gcmv1 7.20 7.22 7.25 ascon128av12 10.56 10.59 10.62 ascon128v12 10.61 10.63 10.66 ascon80pqv12 14.32 14.34 14.36 ascon128abi32v12 17.62 17.71 17.76 T:xoodyakround3 19.17 19.21 19.25 T:schwaemm256128v2 21.07 21.10 21.13 ascon128bi32v12 23.67 23.69 23.73 T:schwaemm256256v2 25.24 25.29 25.34 T:schwaemm192192v2 25.85 25.90 25.95 T:grain128aeadv2 27.99 28.03 28.06 T:schwaemm128128v2 38.37 38.40 38.45 romulusn 40.70 40.95 41.23 T:isapa128v20 40.94 41.04 41.10 T:isapa128av20 41.61 41.63 41.66 T:giftcofb128v1 61.57 61.61 61.64 T:tinyjambu128v2 62.29 62.49 62.55 romulusm 71.79 71.94 72.12 T:isapk128av20 74.19 74.22 74.25 T:tinyjambu192v2 82.05 82.06 82.08 T:tinyjambu256v2 95.11 95.33 95.60 T:isapk128v20 125.13 125.30 126.06 romulust 158.97 159.25 159.50 T:elephant200v2 189.32 189.43 189.79 T:isapxv20 7198.08 7198.71 7200.84 T:elephant176v2 8742.67 8745.93 8749.00 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.83 1.84 1.85 T:aes128gcmv1 2.19 2.22 2.25 aes256gcmv1 7.13 7.16 7.19 ascon128av12 10.37 10.55 10.66 ascon128v12 10.63 10.66 10.70 ascon80pqv12 14.42 14.45 14.46 ascon128abi32v12 17.16 17.24 17.30 T:xoodyakround3 19.17 19.22 19.26 T:schwaemm256128v2 21.36 21.39 21.41 ascon128bi32v12 23.70 23.72 23.74 T:schwaemm256256v2 25.24 25.28 25.36 T:schwaemm192192v2 26.11 26.16 26.20 T:grain128aeadv2 28.02 28.05 28.08 T:schwaemm128128v2 38.42 38.47 38.52 romulusn 40.83 41.00 41.29 T:isapa128v20 40.94 41.05 41.11 T:isapa128av20 41.63 41.68 41.73 T:giftcofb128v1 61.35 61.40 61.44 T:tinyjambu128v2 62.47 62.59 62.65 romulusm 71.81 71.99 72.15 T:isapk128av20 74.13 74.17 74.23 T:tinyjambu192v2 82.05 82.07 82.08 T:tinyjambu256v2 95.12 95.38 95.63 T:isapk128v20 125.14 125.29 125.90 romulust 158.96 159.19 159.53 T:elephant200v2 189.02 189.59 190.50 T:isapxv20 7197.77 7198.93 7201.97 T:elephant176v2 8743.34 8746.21 8748.68 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.83 1.84 1.85 T:aes128gcmv1 2.18 2.21 2.24 aes256gcmv1 7.13 7.15 7.18 ascon128av12 10.54 10.61 10.63 ascon128v12 10.64 10.67 10.70 ascon80pqv12 14.41 14.44 14.46 ascon128abi32v12 17.20 17.27 17.33 T:xoodyakround3 19.18 19.21 19.24 T:schwaemm256128v2 19.95 20.03 20.10 T:isapa128v20 21.36 21.38 21.41 ascon128bi32v12 23.70 23.72 23.73 T:schwaemm256256v2 25.27 25.30 25.36 T:schwaemm192192v2 26.10 26.16 26.22 T:grain128aeadv2 28.01 28.05 28.09 T:schwaemm128128v2 28.02 28.07 28.11 T:isapa128av20 38.42 38.45 38.49 romulusn 41.63 41.67 41.71 T:giftcofb128v1 42.90 43.02 43.09 romulust 47.62 47.75 47.87 T:isapk128av20 59.36 59.52 59.68 T:isapk128v20 61.35 61.39 61.45 T:tinyjambu128v2 62.46 62.59 62.65 romulusm 74.14 74.19 74.48 T:tinyjambu192v2 82.06 82.08 82.09 T:tinyjambu256v2 112.08 112.33 113.04 T:isapxv20 159.07 159.26 159.48 T:elephant200v2 7198.10 7199.97 7212.35 T:elephant176v2 8743.55 8746.44 8748.17 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.20 1.21 1.23 T:aes128gcmv1 1.37 1.39 1.41 aes256gcmv1 7.15 7.17 7.20 ascon128av12 10.59 10.61 10.63 ascon128v12 10.62 10.64 10.65 ascon80pqv12 13.33 13.37 13.40 T:xoodyakround3 14.48 14.50 14.51 ascon128abi32v12 19.03 19.05 19.08 T:schwaemm256128v2 21.16 21.18 21.28 ascon128bi32v12 23.58 23.61 23.63 T:schwaemm256256v2 25.12 25.14 25.16 T:schwaemm192192v2 25.83 25.87 25.90 T:grain128aeadv2 27.82 27.86 27.89 T:schwaemm128128v2 30.30 30.49 30.61 T:isapa128v20 31.26 31.29 31.37 romulusn 34.53 34.55 34.58 T:isapa128av20 41.53 41.55 41.58 T:giftcofb128v1 43.14 43.25 43.28 romulusm 50.47 50.65 50.75 T:tinyjambu128v2 58.17 58.22 58.36 T:tinyjambu192v2 59.63 59.74 59.86 T:isapk128av20 61.93 61.94 61.96 T:tinyjambu256v2 77.29 77.43 77.58 T:isapk128v20 83.85 83.92 84.09 romulust 119.58 119.75 119.95 T:elephant200v2 150.75 150.80 151.06 T:isapxv20 5375.58 5376.11 5377.07 T:elephant176v2 6557.42 6559.40 6560.88 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.22 1.23 1.24 T:aes128gcmv1 1.41 1.42 1.44 aes256gcmv1 7.15 7.17 7.18 ascon128av12 10.48 10.52 10.54 ascon128v12 10.61 10.63 10.65 ascon80pqv12 13.10 13.15 13.17 T:xoodyakround3 14.35 14.40 14.46 ascon128abi32v12 19.01 19.05 19.08 T:schwaemm256128v2 21.49 21.50 21.53 ascon128bi32v12 23.56 23.58 23.61 T:schwaemm256256v2 25.11 25.14 25.18 T:schwaemm192192v2 25.96 26.00 26.03 T:grain128aeadv2 27.85 27.87 27.90 T:schwaemm128128v2 30.36 30.46 30.64 T:isapa128v20 31.28 31.31 31.43 romulusn 34.52 34.58 34.61 T:isapa128av20 41.54 41.57 41.60 T:giftcofb128v1 43.25 43.34 43.36 romulusm 50.35 50.39 50.51 T:tinyjambu128v2 58.17 58.21 58.26 T:tinyjambu192v2 59.66 59.75 59.88 T:isapk128av20 61.95 61.96 61.97 T:tinyjambu256v2 77.36 77.51 77.66 T:isapk128v20 83.89 83.96 84.20 romulust 119.58 119.76 119.96 T:elephant200v2 150.54 150.95 151.63 T:isapxv20 5375.55 5376.21 5377.31 T:elephant176v2 6557.67 6559.19 6560.64 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.22 1.23 1.24 T:aes128gcmv1 1.41 1.42 1.44 aes256gcmv1 7.15 7.17 7.19 ascon128av12 10.49 10.50 10.51 ascon128v12 10.59 10.62 10.64 ascon80pqv12 13.11 13.16 13.19 T:xoodyakround3 14.37 14.39 14.45 ascon128abi32v12 19.04 19.07 19.10 T:schwaemm256128v2 20.03 20.14 20.24 T:isapa128v20 21.50 21.52 21.54 ascon128bi32v12 23.56 23.59 23.62 T:schwaemm256256v2 25.10 25.12 25.16 T:schwaemm192192v2 25.97 26.00 26.02 T:grain128aeadv2 27.85 27.88 27.91 T:schwaemm128128v2 28.03 28.06 28.08 T:isapa128av20 31.29 31.32 31.44 romulusn 41.54 41.56 41.59 T:giftcofb128v1 42.73 42.83 42.88 romulust 43.24 43.34 43.37 romulusm 47.57 47.68 47.78 T:isapk128av20 50.34 50.38 50.47 T:tinyjambu128v2 58.17 58.20 58.25 T:tinyjambu192v2 59.39 59.51 59.63 T:isapk128v20 61.95 61.96 61.98 T:tinyjambu256v2 112.23 112.36 112.86 T:isapxv20 119.48 119.65 119.83 T:elephant200v2 5375.35 5376.44 5377.18 T:elephant176v2 6557.53 6559.32 6560.89 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.60 0.63 0.65 T:aes128gcmv1 0.61 0.64 0.66 aes256gcmv1 7.11 7.15 7.17 ascon128av12 9.01 9.04 9.06 T:xoodyakround3 10.57 10.60 10.63 ascon128v12 10.60 10.62 10.64 ascon80pqv12 14.39 14.41 14.43 ascon128abi32v12 18.81 18.87 18.91 T:schwaemm256128v2 19.64 19.81 20.38 T:isapa128v20 21.26 21.46 21.49 ascon128bi32v12 23.46 23.50 23.55 T:schwaemm256256v2 24.00 24.04 24.07 romulusm 24.11 24.15 24.29 romulusn 24.91 24.97 25.01 T:schwaemm192192v2 25.76 25.80 25.83 T:grain128aeadv2 27.62 27.66 27.70 T:schwaemm128128v2 28.01 28.05 28.08 T:isapa128av20 39.38 39.60 39.81 T:tinyjambu128v2 41.43 41.47 41.51 T:giftcofb128v1 41.88 41.89 41.90 T:tinyjambu256v2 42.24 42.29 42.34 T:tinyjambu192v2 42.50 42.60 42.75 romulust 47.46 47.56 47.68 T:isapk128av20 59.33 59.59 59.90 T:isapk128v20 79.58 79.71 79.86 T:elephant200v2 112.34 112.45 112.56 T:isapxv20 3562.00 3563.96 3565.22 T:elephant176v2 4376.32 4378.05 4379.70 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.60 0.62 0.64 aes256gcmv1 0.60 0.62 0.64 T:aes128gcmv1 7.17 7.20 7.21 ascon128av12 9.01 9.04 9.06 T:xoodyakround3 10.45 10.51 10.53 ascon128v12 10.57 10.60 10.62 ascon80pqv12 14.40 14.42 14.43 ascon128abi32v12 18.83 18.86 18.91 T:schwaemm256128v2 19.88 20.20 20.40 T:isapa128v20 21.61 21.64 21.66 ascon128bi32v12 23.43 23.48 23.52 T:schwaemm256256v2 24.01 24.03 24.06 romulusm 24.08 24.12 24.30 romulusn 24.95 24.98 25.01 T:schwaemm192192v2 25.77 25.79 25.82 T:grain128aeadv2 27.62 27.67 27.71 T:schwaemm128128v2 28.02 28.07 28.10 T:isapa128av20 39.34 39.55 39.81 T:tinyjambu128v2 41.43 41.48 41.51 T:giftcofb128v1 41.86 41.88 41.90 T:tinyjambu256v2 42.21 42.24 42.29 T:tinyjambu192v2 42.54 42.62 42.70 romulust 47.46 47.60 47.73 T:isapk128av20 59.30 59.55 59.76 T:isapk128v20 79.61 79.79 80.05 T:elephant200v2 112.19 112.46 112.95 T:isapxv20 3555.27 3559.77 3563.91 T:elephant176v2 4375.78 4378.00 4380.07 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.60 0.62 0.63 aes256gcmv1 0.60 0.62 0.64 T:aes128gcmv1 7.15 7.17 7.18 ascon128av12 9.00 9.05 9.07 T:xoodyakround3 10.43 10.48 10.53 ascon128v12 10.56 10.59 10.62 ascon80pqv12 14.40 14.42 14.44 ascon128abi32v12 18.82 18.86 18.92 T:schwaemm256128v2 20.00 20.07 20.34 T:isapa128v20 21.61 21.65 21.68 ascon128bi32v12 23.45 23.48 23.52 T:schwaemm256256v2 23.99 24.02 24.05 romulusm 24.07 24.12 24.31 romulusn 24.94 24.97 25.02 T:schwaemm192192v2 25.77 25.80 25.83 T:grain128aeadv2 27.64 27.68 27.72 T:schwaemm128128v2 28.03 28.05 28.08 T:isapa128av20 39.35 39.46 39.81 T:tinyjambu128v2 41.45 41.48 41.52 T:giftcofb128v1 41.88 41.90 41.92 T:tinyjambu256v2 42.21 42.24 42.28 T:tinyjambu192v2 42.55 42.63 42.69 romulust 47.47 47.60 47.74 T:isapk128av20 59.34 59.54 59.73 T:isapk128v20 79.53 79.70 79.92 T:elephant200v2 112.17 112.45 112.90 T:isapxv20 3554.26 3557.03 3560.39 T:elephant176v2 4375.69 4378.26 4380.12 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.36 1.37 1.38 T:aes128gcmv1 1.56 1.57 1.59 aes256gcmv1 7.34 7.35 7.36 ascon128av12 10.75 10.77 10.79 ascon128v12 10.78 10.80 10.82 ascon80pqv12 13.48 13.50 13.53 T:xoodyakround3 14.80 14.81 14.82 ascon128abi32v12 19.60 19.62 19.63 T:schwaemm256128v2 21.55 21.58 21.63 ascon128bi32v12 24.22 24.24 24.27 T:schwaemm256256v2 25.70 25.72 25.75 T:schwaemm192192v2 26.26 26.28 26.31 T:grain128aeadv2 28.20 28.23 28.25 T:schwaemm128128v2 31.58 31.60 31.68 romulusn 37.02 37.06 37.08 T:isapa128av20 41.90 41.92 41.94 T:giftcofb128v1 43.48 43.56 43.62 romulusm 44.29 44.41 44.61 T:isapa128v20 50.87 50.89 50.97 T:tinyjambu128v2 58.64 58.67 58.71 T:tinyjambu192v2 62.42 62.42 62.44 T:tinyjambu256v2 67.00 67.07 67.17 T:isapk128av20 85.12 85.23 85.55 romulust 122.09 122.25 122.41 T:elephant200v2 133.93 134.05 134.20 T:isapk128v20 247.66 247.83 247.84 T:isapxv20 5417.54 5420.28 5421.85 T:elephant176v2 6632.24 6633.18 6635.12 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.38 1.39 1.40 T:aes128gcmv1 1.59 1.60 1.62 aes256gcmv1 7.33 7.35 7.37 ascon128av12 10.65 10.68 10.70 ascon128v12 10.77 10.79 10.81 ascon80pqv12 13.26 13.29 13.31 T:xoodyakround3 14.71 14.75 14.76 ascon128abi32v12 19.57 19.59 19.62 T:schwaemm256128v2 21.88 21.89 21.90 ascon128bi32v12 24.24 24.25 24.27 T:schwaemm256256v2 25.69 25.72 25.75 T:schwaemm192192v2 26.40 26.42 26.44 T:grain128aeadv2 28.22 28.24 28.27 T:schwaemm128128v2 31.61 31.65 31.75 romulusn 37.06 37.09 37.13 T:isapa128av20 41.91 41.93 41.95 T:giftcofb128v1 43.69 43.76 43.78 romulusm 44.28 44.42 44.47 T:isapa128v20 50.78 50.82 50.87 T:tinyjambu128v2 58.63 58.65 58.68 T:tinyjambu192v2 62.43 62.44 62.46 T:tinyjambu256v2 67.07 67.16 67.25 T:isapk128av20 85.18 85.24 85.44 romulust 122.17 122.33 122.52 T:elephant200v2 133.95 134.05 134.26 T:isapk128v20 247.55 247.58 248.26 T:isapxv20 5417.75 5420.19 5421.63 T:elephant176v2 6632.44 6633.83 6634.89 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.39 1.39 1.40 T:aes128gcmv1 1.59 1.61 1.63 aes256gcmv1 7.34 7.35 7.36 ascon128av12 10.61 10.66 10.68 ascon128v12 10.78 10.79 10.80 ascon80pqv12 13.28 13.31 13.34 T:xoodyakround3 14.70 14.74 14.76 ascon128abi32v12 19.58 19.60 19.64 T:schwaemm256128v2 21.89 21.90 21.91 ascon128bi32v12 24.23 24.25 24.28 T:schwaemm256256v2 25.68 25.71 25.73 T:schwaemm192192v2 26.40 26.42 26.45 T:grain128aeadv2 26.99 27.02 27.17 T:isapa128v20 28.24 28.26 28.28 T:schwaemm128128v2 29.46 29.48 29.51 T:isapa128av20 31.61 31.63 31.73 romulusn 41.91 41.93 41.95 T:giftcofb128v1 43.69 43.75 43.79 romulusm 43.97 44.07 44.11 romulust 50.77 50.80 50.85 T:tinyjambu128v2 51.93 51.97 52.05 T:isapk128av20 58.63 58.65 58.68 T:tinyjambu192v2 62.43 62.44 62.45 T:tinyjambu256v2 88.37 88.52 88.64 T:isapk128v20 122.13 122.25 122.38 T:elephant200v2 161.80 161.83 162.36 T:isapxv20 5418.37 5420.13 5421.94 T:elephant176v2 6632.79 6634.02 6634.99 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 7.22 7.27 7.31 T:aes128gcmv1 7.93 8.00 8.05 aes256gcmv1 11.21 11.27 11.41 ascon128av12 14.31 14.42 14.55 ascon128v12 14.40 14.49 14.69 ascon80pqv12 19.39 19.48 19.57 T:xoodyakround3 21.84 21.91 22.04 ascon128abi32v12 29.87 29.97 30.14 ascon128bi32v12 31.79 31.87 32.05 T:schwaemm256128v2 35.35 35.46 35.67 T:grain128aeadv2 36.00 36.20 36.61 T:schwaemm128128v2 38.83 38.88 39.04 T:schwaemm256256v2 38.96 39.07 39.20 romulusn 41.30 41.44 41.76 T:schwaemm192192v2 49.88 50.01 50.15 T:giftcofb128v1 51.40 51.51 51.77 romulusm 59.71 59.89 60.12 T:tinyjambu128v2 68.79 68.96 69.15 T:tinyjambu192v2 73.23 73.30 73.40 T:tinyjambu256v2 94.18 94.32 94.64 T:isapa128av20 113.86 114.18 114.57 romulust 172.62 173.31 174.14 T:elephant200v2 218.62 219.38 220.86 T:isapk128av20 360.63 365.05 366.00 T:isapa128v20 1412.70 1414.23 1416.57 T:isapk128v20 2446.33 2449.28 2449.89 T:isapxv20 6744.23 6744.89 6746.47 T:elephant176v2 8882.41 8883.79 8893.29 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 7.06 7.11 7.17 T:aes128gcmv1 7.77 7.81 7.90 aes256gcmv1 11.29 11.36 11.48 ascon128av12 14.26 14.27 14.28 ascon128v12 14.67 14.78 14.87 ascon80pqv12 19.41 19.54 19.76 T:xoodyakround3 21.87 21.93 22.13 ascon128abi32v12 30.26 30.38 30.51 ascon128bi32v12 31.81 31.92 32.09 T:schwaemm256128v2 35.55 35.61 35.69 T:grain128aeadv2 36.08 36.22 36.50 T:schwaemm128128v2 38.86 38.94 39.00 T:schwaemm256256v2 39.07 39.18 39.29 romulusn 41.61 41.91 42.19 T:schwaemm192192v2 49.99 50.10 50.24 T:giftcofb128v1 53.71 53.83 54.13 romulusm 59.70 59.94 60.08 T:tinyjambu128v2 68.75 68.90 68.98 T:tinyjambu192v2 73.19 73.22 73.30 T:tinyjambu256v2 94.24 94.29 94.54 T:isapa128av20 113.99 114.17 114.54 romulust 172.57 173.27 174.24 T:elephant200v2 218.62 219.68 221.22 T:isapk128av20 360.82 365.38 365.67 T:isapa128v20 1413.19 1414.59 1416.15 T:isapk128v20 2441.58 2442.27 2448.02 T:isapxv20 6743.81 6744.34 6746.02 T:elephant176v2 8882.09 8884.02 8887.01 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 7.06 7.08 7.12 T:aes128gcmv1 7.79 7.83 7.92 aes256gcmv1 11.26 11.36 11.40 ascon128av12 14.20 14.28 14.37 ascon128v12 14.55 14.62 14.75 ascon80pqv12 19.49 19.58 19.67 T:xoodyakround3 21.93 22.02 22.11 ascon128abi32v12 30.23 30.33 30.41 ascon128bi32v12 31.85 31.90 32.14 T:schwaemm256128v2 35.54 35.64 35.74 T:grain128aeadv2 36.03 36.19 36.44 T:schwaemm128128v2 38.85 38.93 39.02 T:schwaemm256256v2 39.03 39.13 39.21 romulusn 41.72 42.03 42.14 T:schwaemm192192v2 50.02 50.14 50.26 T:giftcofb128v1 53.62 53.78 53.89 romulusm 59.76 59.90 59.98 T:tinyjambu128v2 61.65 61.82 62.07 T:isapa128av20 68.87 68.97 69.15 T:tinyjambu192v2 71.87 72.09 72.45 romulust 73.17 73.20 73.29 T:tinyjambu256v2 137.26 138.12 139.09 T:isapk128av20 172.71 173.45 174.15 T:elephant200v2 187.79 188.06 190.44 T:isapa128v20 736.99 738.34 739.42 T:isapk128v20 1277.73 1278.29 1281.45 T:isapxv20 6744.10 6744.85 6745.89 T:elephant176v2 8881.02 8883.63 8891.16 T:elephant160v2