VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20251114

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.75 7.75 7.76 ascon128av12 11.50 11.50 11.50 ascon128v12 11.50 11.50 11.51 ascon80pqv12 17.74 17.75 17.76 ascon128abi32v12 25.50 25.50 26.17 ascon128bi32v12 35.98 36.42 37.05 T:aes128gcmv1 42.49 43.34 44.99 T:aes256gcmv1 48.31 48.33 48.89 T:giftcofb128v1 49.37 49.54 49.71 T:isapa128av20 51.15 51.93 55.27 T:isapa128v20 52.19 52.20 52.48 T:schwaemm256128v2 55.87 55.90 56.18 romulusn 56.25 56.52 56.53 T:tinyjambu128v2 59.94 60.39 60.66 T:xoodyakround3 61.20 61.23 64.50 T:schwaemm256256v2 69.63 69.65 72.38 T:schwaemm192192v2 73.64 73.72 73.97 T:schwaemm128128v2 77.70 77.75 79.30 T:tinyjambu192v2 81.06 81.12 81.94 T:tinyjambu256v2 95.64 95.77 98.73 romulusm 205.56 208.31 209.48 T!!!romulust 331.29 332.69 335.29 T:isapk128av20 336.68 339.56 342.28 T:elephant200v2 416.53 419.87 423.08 T:isapk128v20 419.49 428.47 431.17 T:isapxv20 13521.45 13533.07 13547.53 T:elephant160v2 14340.63 14345.29 14359.13 T:elephant176v2 35646.86 35663.92 35670.42 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.68 7.69 7.74 ascon128av12 11.49 11.50 11.51 ascon128v12 11.50 11.51 11.51 ascon80pqv12 17.81 17.81 18.17 ascon128abi32v12 24.85 24.88 24.90 ascon128bi32v12 35.93 36.45 37.07 T:aes128gcmv1 42.64 43.59 46.32 T:aes256gcmv1 47.87 47.88 47.98 T:giftcofb128v1 49.36 49.53 49.64 T:isapa128av20 51.27 51.82 53.75 T:isapa128v20 52.94 52.95 53.14 T:schwaemm256128v2 55.87 55.88 56.10 romulusn 56.24 56.25 56.38 T:tinyjambu128v2 58.95 58.98 59.13 T:xoodyakround3 61.63 61.64 61.85 T:schwaemm256256v2 70.57 70.59 70.98 T:schwaemm192192v2 75.22 75.54 78.30 T:schwaemm128128v2 77.72 77.75 78.75 T:tinyjambu192v2 81.08 81.11 82.39 T:tinyjambu256v2 95.59 95.62 98.54 romulusm 206.13 208.38 209.26 T!!!romulust 331.51 332.78 335.35 T:isapk128av20 336.43 339.31 342.31 T:elephant200v2 416.60 419.75 423.87 T:isapk128v20 419.49 427.80 431.07 T:isapxv20 13518.97 13529.23 13537.07 T:elephant160v2 14344.72 14352.55 14366.39 T:elephant176v2 35651.67 35661.95 35667.62 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.69 7.69 7.70 ascon128av12 11.49 11.50 11.50 ascon128v12 11.38 11.51 11.54 ascon80pqv12 17.81 17.81 17.86 ascon128abi32v12 24.87 24.89 24.94 ascon128bi32v12 25.68 25.94 26.50 T:isapa128v20 31.99 32.00 32.04 T:isapa128av20 36.01 36.49 37.20 T:aes128gcmv1 42.73 43.61 46.27 T:aes256gcmv1 47.87 47.88 47.99 T:giftcofb128v1 52.94 52.95 53.02 T:schwaemm256128v2 55.87 55.90 56.10 romulusn 56.25 56.27 56.44 T:tinyjambu128v2 59.04 59.10 59.28 T:xoodyakround3 61.63 61.63 61.72 T:schwaemm256256v2 70.57 70.58 71.05 T:schwaemm192192v2 72.03 72.15 75.05 T!!!romulust 75.21 75.22 75.51 T:schwaemm128128v2 77.71 77.75 78.54 T:tinyjambu192v2 81.08 81.13 84.38 T:tinyjambu256v2 95.60 95.66 98.62 romulusm 194.59 195.55 197.46 T:isapk128av20 235.61 237.50 241.69 T:isapk128v20 236.54 239.45 243.22 T:isapxv20 337.80 339.19 342.29 T:elephant200v2 871.35 879.43 882.23 aes256gcmv1 13526.00 13533.27 13541.13 T:elephant160v2 14344.97 14350.62 14372.20 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 7.68 7.69 7.70 ascon128av12 11.31 11.31 11.32 ascon128v12 11.31 11.31 11.36 ascon80pqv12 17.28 17.28 17.29 ascon128abi32v12 25.05 25.06 25.12 ascon128bi32v12 27.29 27.92 29.42 T:aes128gcmv1 30.75 31.25 32.68 T:aes256gcmv1 38.31 39.01 40.49 T:isapa128v20 40.69 40.72 42.11 T:isapa128av20 45.53 45.77 46.95 T:xoodyakround3 46.28 46.38 47.70 T:tinyjambu128v2 47.75 47.79 49.23 romulusn 47.78 47.82 49.21 T:giftcofb128v1 51.80 51.81 53.17 T:schwaemm256128v2 60.79 60.96 62.43 T:schwaemm256256v2 60.94 61.03 62.41 T:tinyjambu256v2 61.23 61.33 62.71 T:tinyjambu192v2 67.65 68.23 69.07 romulusm 69.02 70.34 70.61 T:schwaemm192192v2 71.60 71.67 72.96 T:schwaemm128128v2 139.98 140.13 141.07 T!!!romulust 254.35 256.58 258.13 T:elephant200v2 265.62 266.14 268.25 T:isapk128av20 329.49 331.97 334.08 T:isapk128v20 332.72 337.03 341.91 T:isapxv20 10144.79 10148.64 10164.12 T:elephant160v2 10717.70 10727.29 10734.82 T:elephant176v2 18254.54 18262.43 18273.78 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 7.65 7.66 7.67 ascon128av12 11.31 11.31 11.37 ascon128v12 11.31 11.32 11.37 ascon80pqv12 17.24 17.33 17.46 ascon128abi32v12 24.68 24.70 25.25 ascon128bi32v12 27.39 27.96 29.37 T:aes128gcmv1 30.69 31.17 32.71 T:aes256gcmv1 38.58 39.01 40.66 T:isapa128v20 40.69 40.83 41.08 T:isapa128av20 45.03 45.06 46.52 T:xoodyakround3 46.26 46.38 47.72 T:tinyjambu128v2 47.57 47.61 49.09 T:giftcofb128v1 47.75 47.85 49.22 romulusn 52.18 52.24 53.63 T:schwaemm256128v2 60.92 60.94 62.30 T:tinyjambu256v2 61.23 61.27 62.70 T:tinyjambu192v2 61.04 62.34 62.50 T:schwaemm256256v2 67.65 67.96 69.22 romulusm 69.46 69.54 70.88 T:schwaemm192192v2 72.38 73.70 74.11 T:schwaemm128128v2 139.89 140.10 140.33 T!!!romulust 254.33 255.97 258.08 T:elephant200v2 265.50 266.58 268.38 T:isapk128av20 329.39 331.64 333.74 T:isapk128v20 332.94 337.84 339.78 T:isapxv20 10144.33 10151.43 10160.48 T:elephant160v2 10718.67 10727.03 10753.22 T:elephant176v2 18251.27 18257.51 18265.48 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 7.66 7.66 7.66 ascon128av12 11.30 11.31 11.36 ascon128v12 11.31 11.31 11.32 ascon80pqv12 17.27 17.33 17.45 ascon128abi32v12 24.68 24.69 25.24 ascon128bi32v12 25.65 26.13 27.70 T:isapa128v20 27.49 27.92 29.24 T:aes128gcmv1 31.03 31.44 32.94 T:aes256gcmv1 32.00 32.01 32.24 T:isapa128av20 45.07 45.10 46.41 T:xoodyakround3 46.29 46.39 47.78 T:tinyjambu128v2 47.60 47.70 49.32 T:giftcofb128v1 47.76 47.85 49.22 romulusn 52.18 52.22 53.54 T:schwaemm256128v2 60.92 60.95 62.30 T:tinyjambu256v2 61.03 61.28 62.78 T:schwaemm256256v2 61.25 61.31 62.76 T:tinyjambu192v2 67.66 67.72 69.08 romulusm 69.47 69.54 71.06 T:schwaemm192192v2 72.39 72.59 73.85 T:schwaemm128128v2 71.88 73.20 73.53 T!!!romulust 196.36 197.77 198.45 T:isapk128av20 238.98 240.08 242.01 T:isapk128v20 241.60 245.20 247.14 T:isapxv20 254.37 255.88 258.11 T:elephant200v2 876.59 877.91 878.89 aes256gcmv1 10140.20 10145.94 10154.08 T:elephant160v2 10717.90 10722.94 10737.13 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.62 7.62 7.63 ascon128av12 11.12 11.12 11.13 ascon80pqv12 11.12 11.12 11.13 ascon128v12 16.81 16.81 16.82 ascon128abi32v12 18.40 18.77 19.30 T:aes128gcmv1 18.30 18.77 19.16 T:aes256gcmv1 24.61 24.88 24.90 ascon128bi32v12 24.81 25.77 26.19 T:isapa128v20 30.84 31.15 31.20 T:xoodyakround3 31.98 32.01 32.22 T:isapa128av20 36.49 36.51 36.53 T:tinyjambu128v2 39.61 39.63 39.79 romulusn 39.68 39.70 39.89 romulusm 40.74 40.76 40.82 T:tinyjambu256v2 44.75 44.76 44.82 T:tinyjambu192v2 47.23 47.26 47.62 T:giftcofb128v1 51.41 51.44 52.51 T:schwaemm256128v2 60.38 60.39 60.60 T:schwaemm256256v2 68.35 68.43 68.51 T:schwaemm192192v2 69.53 69.54 69.74 T:schwaemm128128v2 71.71 71.74 72.32 T!!!romulust 172.20 172.76 174.26 T:elephant200v2 198.84 199.95 201.85 T:isapk128av20 239.63 241.63 244.62 T:isapk128v20 241.79 245.30 247.54 T:isapxv20 866.61 879.15 881.17 aes256gcmv1 6759.09 6768.24 6774.17 T:elephant160v2 7088.40 7096.91 7100.43 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.62 7.62 7.63 ascon128av12 11.12 11.12 11.12 ascon128v12 11.12 11.12 11.21 ascon80pqv12 16.76 16.95 17.14 ascon128abi32v12 18.47 18.90 19.57 T:aes128gcmv1 18.66 19.00 19.94 T:aes256gcmv1 24.49 24.51 24.73 ascon128bi32v12 25.52 26.02 26.64 T:isapa128v20 30.84 31.12 31.14 T:xoodyakround3 31.98 32.00 32.02 T:isapa128av20 36.50 36.51 36.53 T:tinyjambu128v2 39.61 39.64 39.96 romulusn 39.68 39.70 39.80 romulusm 40.75 40.76 40.84 T:tinyjambu256v2 44.73 44.75 44.77 T:tinyjambu192v2 47.25 47.26 47.35 T:giftcofb128v1 51.41 51.43 51.53 T:schwaemm256128v2 60.38 60.38 60.42 T:schwaemm256256v2 68.34 68.43 71.20 T:schwaemm192192v2 69.53 69.53 69.67 T:schwaemm128128v2 71.71 71.86 72.35 T!!!romulust 172.26 173.56 175.17 T:elephant200v2 198.98 199.92 201.19 T:isapk128av20 239.74 241.91 245.40 T:isapk128v20 241.78 245.31 247.59 T:isapxv20 872.20 875.83 881.47 aes256gcmv1 6761.22 6767.88 6774.05 T:elephant160v2 7086.15 7094.87 7097.99 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.63 7.63 7.63 ascon128av12 11.12 11.12 11.13 ascon80pqv12 11.12 11.12 11.24 ascon128v12 16.68 16.82 17.02 ascon128abi32v12 18.53 18.75 19.05 T:aes128gcmv1 18.76 19.03 19.73 T:aes256gcmv1 24.48 24.51 24.90 ascon128bi32v12 25.47 25.66 26.41 T:isapa128v20 31.09 31.11 31.14 T:xoodyakround3 31.98 32.00 32.04 T:isapa128av20 36.49 36.52 36.59 T:tinyjambu128v2 39.63 39.65 39.68 romulusn 39.69 39.70 39.74 romulusm 40.75 40.76 40.78 T:tinyjambu256v2 44.74 44.75 44.77 T:tinyjambu192v2 47.25 47.33 47.65 T:giftcofb128v1 51.41 51.43 51.63 T:schwaemm256128v2 60.38 60.38 60.44 T:schwaemm256256v2 68.34 68.41 68.46 T:schwaemm192192v2 69.52 69.53 69.62 T:schwaemm128128v2 71.71 71.87 74.56 T!!!romulust 170.87 172.26 173.82 T:elephant200v2 199.67 200.09 201.84 T:isapk128av20 239.68 242.92 246.14 T:isapk128v20 242.03 244.57 249.56 T:isapxv20 866.62 881.03 889.68 aes256gcmv1 6753.74 6767.24 6774.95 T:elephant160v2 7090.35 7094.04 7098.20 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 7.89 7.89 7.89 ascon128av12 11.49 11.50 11.57 ascon128v12 11.50 11.50 11.54 ascon80pqv12 17.71 17.71 17.71 ascon128abi32v12 25.51 25.51 25.59 ascon128bi32v12 32.11 32.50 34.11 T:aes128gcmv1 35.53 35.74 37.63 T:aes256gcmv1 44.16 44.17 44.55 T:isapa128av20 45.98 46.19 46.42 T:xoodyakround3 46.75 46.77 48.49 T:tinyjambu128v2 48.25 48.26 48.72 romulusn 48.29 48.31 48.89 T:giftcofb128v1 53.21 53.22 53.39 T:schwaemm256128v2 56.50 56.80 58.93 T:isapa128v20 61.40 61.43 63.09 T:tinyjambu256v2 61.73 61.75 63.36 T:tinyjambu192v2 62.35 62.39 64.08 T:schwaemm256256v2 68.21 68.27 69.99 romulusm 70.41 70.45 72.18 T:schwaemm192192v2 72.44 72.45 74.12 T:schwaemm128128v2 141.92 142.60 143.44 T!!!romulust 259.97 260.94 262.53 T:elephant200v2 291.66 293.11 295.17 T:isapk128av20 535.46 536.74 540.64 T:isapk128v20 539.41 543.40 545.15 T:isapxv20 10258.01 10264.97 10274.55 T:elephant160v2 10799.19 10801.78 10812.41 T:elephant176v2 18623.50 18631.72 18639.77 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 7.86 7.86 7.87 ascon128av12 11.49 11.49 11.50 ascon128v12 11.50 11.50 11.50 ascon80pqv12 17.76 17.81 18.02 ascon128abi32v12 25.15 25.15 25.22 ascon128bi32v12 32.12 32.53 34.24 T:aes128gcmv1 35.56 35.77 37.76 T:aes256gcmv1 44.17 44.31 44.60 T:isapa128av20 45.47 45.49 47.24 T:xoodyakround3 46.75 46.77 46.78 T:tinyjambu128v2 48.08 48.13 48.73 T:giftcofb128v1 48.23 48.28 48.69 romulusn 53.59 53.64 55.46 T:schwaemm256128v2 56.49 56.90 58.58 T:isapa128v20 61.76 61.79 63.79 T:tinyjambu192v2 61.43 61.92 63.17 T:tinyjambu256v2 62.56 62.60 64.30 T:schwaemm256256v2 68.33 68.36 70.16 romulusm 70.89 70.92 72.65 T:schwaemm192192v2 73.22 73.25 75.04 T:schwaemm128128v2 141.07 142.58 142.86 T!!!romulust 260.15 260.36 263.25 T:elephant200v2 291.38 293.36 295.13 T:isapk128av20 535.43 536.34 539.99 T:isapk128v20 539.79 542.82 544.46 T:isapxv20 10255.83 10259.09 10271.80 T:elephant160v2 10802.47 10805.71 10815.52 T:elephant176v2 18620.53 18626.62 18630.86 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 7.86 7.86 7.93 ascon128av12 11.49 11.49 11.56 ascon128v12 11.50 11.50 11.56 ascon80pqv12 17.76 17.81 17.91 ascon128abi32v12 25.15 25.15 25.45 ascon128bi32v12 32.05 32.27 34.12 T:aes128gcmv1 33.92 33.93 34.29 T:isapa128av20 34.80 34.89 35.33 T:isapa128v20 35.58 36.11 37.82 T:aes256gcmv1 45.52 45.54 45.78 T:xoodyakround3 46.76 46.78 48.72 T:tinyjambu128v2 48.09 48.22 50.31 T:giftcofb128v1 48.23 48.26 48.64 romulusn 53.59 53.60 53.87 T:schwaemm256128v2 61.42 61.43 61.57 T:tinyjambu256v2 61.75 61.79 62.76 T:tinyjambu192v2 62.56 62.59 64.31 T:schwaemm256256v2 68.34 68.37 70.15 romulusm 70.89 70.92 72.60 T:schwaemm192192v2 73.22 73.24 74.98 T:schwaemm128128v2 73.97 74.10 75.66 T!!!romulust 212.09 213.74 214.07 T:isapk128av20 260.18 262.13 263.55 T:elephant200v2 344.78 345.29 347.14 T:isapk128v20 347.43 349.08 351.33 T:isapxv20 1241.13 1243.91 1246.12 aes256gcmv1 10256.19 10258.36 10271.45 T:elephant160v2 10798.44 10802.49 10809.94 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 12.45 12.45 12.78 ascon128av12 15.59 15.59 15.78 ascon80pqv12 15.59 15.66 15.77 ascon128v12 27.33 27.48 27.92 ascon128abi32v12 35.71 35.84 35.88 ascon128bi32v12 55.39 55.47 55.70 T:tinyjambu128v2 59.51 59.58 59.73 romulusn 59.90 59.90 60.23 T:giftcofb128v1 65.21 65.36 65.51 T:xoodyakround3 72.39 72.47 72.57 T:tinyjambu256v2 73.10 73.30 73.36 T:tinyjambu192v2 80.75 80.76 81.03 romulusm 85.40 85.51 85.52 T:schwaemm256128v2 91.84 91.84 91.93 T:schwaemm128128v2 97.56 97.80 97.91 T:schwaemm256256v2 111.48 111.52 111.62 T:schwaemm192192v2 123.83 123.95 124.09 T:isapa128av20 132.75 133.96 139.47 T:aes128gcmv1 140.52 141.81 146.26 T:aes256gcmv1 191.64 191.70 192.03 T!!!romulust 366.03 367.19 368.05 T:elephant200v2 462.28 465.60 479.24 T:isapa128v20 854.18 857.21 857.97 T:isapk128av20 5197.23 5211.51 5240.85 T:isapk128v20 5212.23 5220.30 5268.98 T:isapxv20 13407.67 13443.14 13500.18 T:elephant176v2 13689.56 13728.80 13801.38 T:elephant160v2 26995.60 27096.31 27106.37 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 12.52 12.52 12.78 ascon128av12 15.58 15.58 15.73 ascon128v12 15.62 15.62 15.93 ascon80pqv12 27.78 27.78 29.40 ascon128abi32v12 35.52 35.59 35.80 ascon128bi32v12 55.48 55.58 55.63 T:tinyjambu128v2 59.16 59.17 59.27 romulusn 59.82 59.82 59.98 T:giftcofb128v1 64.74 64.82 65.06 T:xoodyakround3 72.81 73.03 73.20 T:tinyjambu256v2 73.68 73.70 73.73 T:tinyjambu192v2 83.95 84.02 84.30 romulusm 85.82 85.93 86.38 T:schwaemm256128v2 92.63 92.63 92.76 T:schwaemm128128v2 98.05 98.16 98.16 T:schwaemm256256v2 112.14 112.23 112.46 T:schwaemm192192v2 124.11 124.20 124.41 T:isapa128av20 132.87 133.52 138.52 T:aes128gcmv1 140.15 140.87 145.03 T:aes256gcmv1 191.59 191.84 192.02 T!!!romulust 364.77 366.48 368.16 T:elephant200v2 462.55 465.54 474.75 T:isapa128v20 854.57 857.12 859.96 T:isapk128av20 5196.94 5212.05 5241.39 T:isapk128v20 5213.44 5221.18 5259.66 T:isapxv20 13425.77 13446.25 13501.58 T:elephant176v2 13688.38 13729.31 13819.79 T:elephant160v2 26990.32 27090.52 27096.45 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 12.52 12.52 12.52 ascon128av12 15.56 15.56 15.62 ascon80pqv12 15.52 15.57 15.58 ascon128v12 27.78 27.78 28.93 ascon128abi32v12 35.52 35.52 35.52 ascon128bi32v12 55.45 55.51 55.63 T:tinyjambu128v2 59.16 59.17 59.21 romulusn 59.80 59.82 59.82 T:giftcofb128v1 64.81 64.88 64.98 T:xoodyakround3 72.81 73.09 73.20 T:tinyjambu256v2 73.68 73.73 73.75 T:tinyjambu192v2 77.95 78.10 78.17 T:isapa128av20 83.94 83.96 84.24 romulusm 85.82 85.92 85.93 T:schwaemm256128v2 92.63 92.63 92.63 T:schwaemm128128v2 98.05 98.05 98.16 T:schwaemm256256v2 111.84 112.18 112.30 T:schwaemm192192v2 121.71 121.99 122.15 T!!!romulust 132.61 133.29 135.41 T:aes128gcmv1 140.16 140.98 144.17 T:aes256gcmv1 241.13 242.39 248.30 T:isapa128v20 366.14 366.51 368.34 T:elephant200v2 525.20 525.24 528.22 T:isapk128av20 2699.70 2732.50 2746.12 T:isapk128v20 2727.18 2742.28 2754.66 T:isapxv20 9661.41 9664.89 9686.81 aes256gcmv1 13441.27 13450.03 13531.18 T:elephant176v2 13709.56 13728.00 13791.91 T:elephant160v2