VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.92 0.95 0.97 T:aes128gcmv1 1.52 1.54 1.55 aes256gcmv1 6.72 6.74 6.78 ascon128av12 9.94 10.04 10.24 ascon80pqv12 10.07 10.13 10.16 ascon128v12 13.00 13.20 13.32 ascon128abi32v12 13.37 13.42 13.47 T:schwaemm256128v2 15.29 15.35 15.43 T:xoodyakround3 17.73 17.82 17.87 T:schwaemm192192v2 19.06 19.12 19.21 ascon128bi32v12 19.49 19.53 19.59 T:schwaemm256256v2 19.83 19.88 19.93 T:schwaemm128128v2 24.30 24.42 24.50 T:grain128aeadv2 38.77 38.79 38.85 romulusn 39.09 39.24 40.11 T:isapa128av20 39.24 39.79 39.88 T:isapa128v20 39.79 39.83 39.88 T:giftcofb128v1 49.40 49.71 50.61 T:isapk128av20 54.98 55.09 55.15 T:tinyjambu128v2 62.72 62.78 62.84 romulusm 66.61 66.67 66.78 T:tinyjambu192v2 67.01 68.35 69.41 T:isapk128v20 71.07 71.17 71.24 T:tinyjambu256v2 110.30 110.46 111.03 T:elephant200v2 119.83 120.59 121.52 T:isapxv20 129.92 130.02 130.11 romulust 5780.83 5815.66 5835.69 T:elephant176v2 5881.95 5888.07 5890.52 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.68 0.70 0.71 T:aes128gcmv1 1.41 1.42 1.44 aes256gcmv1 6.72 6.75 6.79 ascon128av12 9.89 10.00 10.25 ascon80pqv12 10.07 10.10 10.15 ascon128v12 13.01 13.14 13.22 ascon128abi32v12 13.38 13.43 13.49 T:schwaemm256128v2 15.16 15.23 15.33 T:xoodyakround3 17.72 17.80 17.91 T:schwaemm192192v2 19.43 19.47 19.51 ascon128bi32v12 19.77 19.79 19.82 T:schwaemm128128v2 19.66 20.48 20.66 T:schwaemm256256v2 23.65 23.68 23.72 T:grain128aeadv2 38.84 38.86 38.91 romulusn 39.23 39.38 39.62 T:isapa128v20 39.50 39.66 39.72 T:isapa128av20 39.80 39.83 39.89 T:giftcofb128v1 49.63 49.93 50.25 T:isapk128av20 54.83 54.89 54.96 T:tinyjambu128v2 62.97 63.03 63.18 romulusm 66.44 66.55 66.61 T:tinyjambu192v2 66.72 67.83 68.81 T:isapk128v20 70.98 71.04 71.20 T:tinyjambu256v2 109.81 111.07 111.25 T:elephant200v2 119.73 119.97 120.37 T:isapxv20 129.88 129.93 130.09 romulust 5763.83 5801.09 5835.29 T:elephant176v2 5887.40 5888.47 5891.03 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.69 0.71 T:aes128gcmv1 1.41 1.42 1.43 aes256gcmv1 6.71 6.75 6.79 ascon128av12 10.07 10.10 10.14 ascon128v12 9.87 10.20 10.30 ascon80pqv12 13.05 13.11 13.22 ascon128abi32v12 13.41 13.44 13.48 T:schwaemm256128v2 15.13 15.20 15.25 T:xoodyakround3 17.75 17.81 17.87 T:schwaemm192192v2 19.37 19.41 19.48 ascon128bi32v12 19.43 19.50 19.56 T:isapa128v20 19.52 19.62 19.72 T:schwaemm256256v2 19.76 19.79 19.85 T:schwaemm128128v2 23.66 23.68 23.72 T:grain128aeadv2 26.35 26.44 26.48 T:isapa128av20 33.08 33.29 33.85 T:isapk128av20 38.81 38.85 38.90 romulusn 39.81 39.85 39.88 T:giftcofb128v1 42.02 42.65 43.24 T:isapk128v20 44.88 44.96 45.03 romulust 54.75 54.86 54.91 T:tinyjambu128v2 63.05 63.07 63.13 romulusm 66.41 66.47 66.56 T:tinyjambu192v2 70.58 71.23 71.66 T:tinyjambu256v2 71.98 72.14 72.76 T:isapxv20 110.66 110.75 111.15 T:elephant200v2 5782.50 5818.75 5842.91 T:elephant176v2 5885.96 5888.46 5891.12 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.62 0.63 0.64 T:aes128gcmv1 0.91 0.92 0.93 aes256gcmv1 6.70 6.72 6.74 ascon128av12 10.01 10.04 10.18 ascon80pqv12 10.00 10.10 10.15 ascon128v12 11.44 11.47 11.53 T:xoodyakround3 13.31 13.33 13.40 T:schwaemm256128v2 13.30 13.34 13.41 ascon128abi32v12 17.75 17.77 17.80 T:schwaemm192192v2 19.25 19.35 19.42 ascon128bi32v12 19.42 19.45 19.50 T:schwaemm256256v2 19.81 19.85 19.89 T:schwaemm128128v2 24.16 24.31 24.36 T:grain128aeadv2 29.45 29.63 29.69 T:isapa128v20 31.14 31.15 31.19 romulusn 32.40 32.42 32.47 T:isapa128av20 39.78 39.80 39.84 T:giftcofb128v1 41.88 42.22 42.56 T:isapk128av20 42.94 42.99 43.03 romulusm 44.99 45.06 45.09 T:tinyjambu128v2 52.11 52.16 52.20 T:tinyjambu192v2 53.81 53.88 53.94 T:tinyjambu256v2 54.13 54.92 55.77 T:isapk128v20 82.90 83.29 83.38 T:elephant200v2 87.24 87.36 87.40 romulust 96.52 96.89 97.14 T:isapxv20 4318.04 4338.39 4352.92 T:elephant176v2 4413.54 4414.80 4415.37 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.48 0.50 0.51 T:aes128gcmv1 0.85 0.86 0.87 aes256gcmv1 6.67 6.71 6.72 ascon128av12 9.98 10.05 10.11 ascon80pqv12 10.08 10.12 10.14 ascon128v12 11.37 11.47 11.50 T:xoodyakround3 13.20 13.23 13.28 ascon128abi32v12 13.30 13.32 13.37 T:schwaemm256128v2 17.69 17.72 17.75 T:schwaemm192192v2 19.37 19.41 19.46 ascon128bi32v12 19.44 19.54 19.59 T:schwaemm256256v2 19.79 19.82 19.85 T:schwaemm128128v2 23.88 23.92 23.96 T:grain128aeadv2 29.36 29.57 29.70 T:isapa128v20 31.15 31.17 31.21 romulusn 32.77 32.95 33.03 T:isapa128av20 39.75 39.80 39.82 T:giftcofb128v1 41.68 41.92 42.10 T:isapk128av20 43.08 43.11 43.15 romulusm 44.93 45.04 45.10 T:tinyjambu128v2 52.17 52.22 52.27 T:tinyjambu192v2 53.61 53.67 53.82 T:tinyjambu256v2 54.26 54.77 55.72 T:isapk128v20 82.85 82.90 83.07 T:elephant200v2 87.27 87.32 87.36 romulust 96.39 96.58 96.81 T:isapxv20 4301.19 4328.79 4349.39 T:elephant176v2 4412.66 4413.94 4415.29 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.50 T:aes128gcmv1 0.85 0.86 0.86 aes256gcmv1 6.68 6.69 6.71 ascon128av12 9.97 10.08 10.13 ascon80pqv12 10.09 10.13 10.16 ascon128v12 11.35 11.39 11.46 T:xoodyakround3 13.25 13.28 13.31 ascon128abi32v12 13.34 13.38 13.42 T:schwaemm256128v2 17.71 17.75 17.78 T:schwaemm192192v2 19.40 19.45 19.57 ascon128bi32v12 19.45 19.49 19.50 T:isapa128v20 19.79 19.82 19.84 T:schwaemm128128v2 19.50 19.87 20.64 T:schwaemm256256v2 23.88 23.92 24.04 T:grain128aeadv2 26.32 26.37 26.40 T:isapa128av20 31.14 31.16 31.22 romulusn 33.42 33.74 34.16 T:isapk128av20 39.78 39.82 39.84 T:giftcofb128v1 41.92 42.19 42.68 T:isapk128v20 43.11 43.15 43.19 romulusm 44.73 44.77 44.83 romulust 44.89 44.91 44.98 T:tinyjambu128v2 52.06 52.12 52.17 T:tinyjambu192v2 53.82 53.87 54.02 T:tinyjambu256v2 72.58 72.75 72.86 T:isapxv20 82.65 82.98 83.61 T:elephant200v2 4308.72 4322.25 4338.62 T:elephant176v2 4414.34 4415.52 4417.09 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.29 0.31 0.32 aes256gcmv1 0.30 0.32 0.33 T:aes128gcmv1 6.67 6.69 6.72 ascon128av12 7.58 7.65 7.75 T:xoodyakround3 9.78 10.03 10.08 ascon80pqv12 10.11 10.16 10.21 ascon128v12 13.25 13.30 13.35 T:schwaemm256128v2 13.27 13.36 13.42 ascon128abi32v12 17.61 17.69 17.78 T:schwaemm192192v2 19.31 19.41 19.50 ascon128bi32v12 19.37 19.41 19.43 T:schwaemm256256v2 19.44 19.50 19.55 T:isapa128v20 19.77 19.81 19.84 T:schwaemm128128v2 23.15 23.18 23.21 romulusm 23.46 23.53 23.57 romulusn 24.21 24.25 24.30 T:grain128aeadv2 26.14 26.28 26.40 T:isapa128av20 33.12 33.48 33.98 T:isapk128av20 34.82 34.89 34.95 T:tinyjambu128v2 36.25 36.32 36.39 T:tinyjambu256v2 37.52 37.78 37.88 T:tinyjambu192v2 39.75 39.81 39.86 T:giftcofb128v1 41.05 41.90 42.19 T:isapk128v20 44.58 44.63 44.71 romulust 55.44 55.87 56.31 T:elephant200v2 72.39 72.48 72.71 T:isapxv20 2847.07 2859.89 2878.81 T:elephant176v2 2938.56 2940.08 2941.96 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.28? 0.30? 0.32? T:aes128gcmv1 0.28? 0.31? 0.32? aes256gcmv1 6.66 6.69 6.73 ascon128av12 7.56 7.63 7.69 T:xoodyakround3 10.05 10.09 10.12 ascon80pqv12 9.79 10.09 10.15 ascon128v12 13.29 13.32 13.39 ascon128abi32v12 13.29 13.34 13.40 T:schwaemm256128v2 17.67 17.75 17.79 T:schwaemm192192v2 19.43 19.48 19.52 T:isapa128v20 19.39 19.49 19.87 ascon128bi32v12 19.75 19.76 19.80 T:schwaemm128128v2 19.46 20.51 20.60 T:schwaemm256256v2 23.18 23.21 23.25 romulusm 23.47 23.51 23.56 romulusn 24.08 24.29 24.35 T:grain128aeadv2 26.32 26.38 26.48 T:isapa128av20 33.03 33.48 34.10 T:isapk128av20 34.89 35.02 35.07 T:tinyjambu128v2 36.30 36.35 36.41 T:tinyjambu256v2 37.44 37.54 37.70 T:tinyjambu192v2 39.71 39.80 39.84 T:giftcofb128v1 40.99 41.68 42.45 T:isapk128v20 44.58 44.70 44.80 romulust 55.26 55.77 56.18 T:elephant200v2 72.72 72.81 73.14 T:isapxv20 2843.11 2850.25 2873.55 T:elephant176v2 2936.71 2938.03 2940.30 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.29 0.31 0.32 aes256gcmv1 6.64 6.67 6.69 ascon128av12 7.56 7.65 7.70 T:xoodyakround3 9.84 10.08 10.21 ascon128v12 10.05 10.09 10.14 ascon80pqv12 13.26 13.36 13.41 T:schwaemm256128v2 13.30 13.36 13.41 ascon128abi32v12 17.69 17.74 17.76 T:schwaemm192192v2 19.41 19.45 19.55 T:isapa128v20 19.42 19.49 19.63 ascon128bi32v12 19.35 19.50 20.54 T:schwaemm256256v2 19.78 19.82 19.87 T:schwaemm128128v2 23.17 23.23 23.25 romulusm 23.47 23.50 23.54 romulusn 24.05 24.08 24.33 T:grain128aeadv2 26.33 26.40 26.45 T:isapa128av20 32.99 33.23 33.75 T:isapk128av20 34.92 35.03 35.11 T:tinyjambu128v2 36.27 36.37 36.45 T:tinyjambu256v2 37.42 37.53 37.65 T:tinyjambu192v2 39.71 39.78 39.84 T:giftcofb128v1 40.87 41.84 42.87 T:isapk128v20 44.66 44.72 44.76 romulust 55.80 55.89 55.99 T:elephant200v2 72.39 72.67 73.66 T:isapxv20 2874.16 2881.78 2889.26 T:elephant176v2 2938.71 2939.43 2942.34 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.74 0.75 0.75 T:aes128gcmv1 1.06 1.06 1.07 aes256gcmv1 6.85 6.87 6.88 ascon128av12 10.10 10.16 10.28 ascon80pqv12 10.11 10.21 10.28 ascon128v12 11.57 11.60 11.61 T:xoodyakround3 13.49 13.62 13.69 ascon128abi32v12 13.72 13.75 13.78 T:schwaemm256128v2 18.14 18.15 18.19 T:schwaemm192192v2 19.55 19.58 19.63 ascon128bi32v12 20.00 20.02 20.06 T:schwaemm256256v2 20.08 20.09 20.10 T:schwaemm128128v2 24.62 24.63 24.65 T:grain128aeadv2 31.51 31.54 31.55 romulusn 36.14 36.17 36.21 T:isapa128av20 40.13 40.16 40.18 T:giftcofb128v1 42.74 42.92 43.01 T:isapa128v20 43.24 43.28 43.30 romulusm 45.48 45.50 45.56 T:tinyjambu128v2 46.78 46.95 47.37 T:isapk128av20 52.67 52.75 52.81 T:tinyjambu192v2 54.29 54.34 54.41 T:tinyjambu256v2 84.42 84.60 84.95 T:elephant200v2 88.56 88.58 88.63 romulust 94.51 94.82 95.07 T:isapk128v20 159.88 159.97 160.40 T:isapxv20 4337.63 4340.24 4361.82 T:elephant176v2 4463.48 4464.05 4464.79 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 1.00 1.01 1.02 aes256gcmv1 6.84 6.86 6.87 ascon128av12 10.17 10.24 10.28 ascon80pqv12 10.20 10.25 10.27 ascon128v12 11.52 11.54 11.61 T:xoodyakround3 13.49 13.59 13.62 ascon128abi32v12 13.76 13.77 13.83 T:schwaemm256128v2 18.12 18.15 18.18 T:schwaemm192192v2 19.72 19.78 19.86 ascon128bi32v12 20.05 20.09 20.10 T:schwaemm128128v2 20.07 20.10 21.04 T:schwaemm256256v2 24.26 24.30 24.36 T:grain128aeadv2 31.56 31.58 31.61 romulusn 36.64 36.67 36.73 T:isapa128av20 40.11 40.14 40.17 T:giftcofb128v1 42.58 42.76 42.98 T:isapa128v20 43.39 43.43 43.46 romulusm 45.43 45.44 45.50 T:tinyjambu128v2 46.58 46.77 46.87 T:isapk128av20 52.61 52.65 52.71 T:tinyjambu192v2 54.30 54.33 54.38 T:tinyjambu256v2 84.57 84.74 85.18 T:elephant200v2 88.60 88.64 88.69 romulust 93.93 94.13 94.85 T:isapk128v20 159.40 160.08 161.12 T:isapxv20 4344.05 4365.98 4380.98 T:elephant176v2 4463.02 4464.46 4465.46 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 1.01 1.01 1.01 aes256gcmv1 6.85 6.87 6.89 ascon128av12 10.12 10.18 10.22 ascon80pqv12 10.17 10.22 10.23 ascon128v12 11.53 11.55 11.60 T:xoodyakround3 13.55 13.58 13.59 ascon128abi32v12 13.77 13.80 13.83 T:schwaemm256128v2 18.12 18.14 18.19 T:schwaemm192192v2 19.74 19.81 19.85 ascon128bi32v12 20.07 20.08 20.11 T:schwaemm128128v2 20.07 20.17 21.01 T:schwaemm256256v2 24.29 24.40 24.41 T:grain128aeadv2 26.21 26.23 26.25 T:isapa128v20 28.31 28.36 28.38 T:isapa128av20 31.55 31.58 31.60 romulusn 36.39 36.48 36.64 T:isapk128av20 40.10 40.16 40.17 T:giftcofb128v1 43.39 43.42 43.46 romulusm 45.37 45.39 45.40 T:tinyjambu128v2 46.04 46.07 46.15 romulust 52.59 52.67 52.72 T:tinyjambu192v2 54.02 54.10 54.16 T:tinyjambu256v2 62.43 62.79 62.91 T:isapk128v20 84.52 84.56 84.86 T:elephant200v2 104.88 105.32 105.70 T:isapxv20 4350.28 4377.72 4384.87 T:elephant176v2 4463.19 4464.09 4465.41 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.17 5.32 5.52 T:aes128gcmv1 5.59 5.67 5.86 aes256gcmv1 10.16 10.28 10.47 ascon128av12 13.19 13.32 13.40 ascon128v12 13.30 13.37 13.54 ascon80pqv12 16.55 17.15 17.51 T:xoodyakround3 20.27 20.48 20.78 ascon128abi32v12 22.35 22.64 23.34 T:schwaemm256128v2 25.54 25.71 25.99 T:schwaemm128128v2 26.85 27.05 27.17 ascon128bi32v12 29.34 29.54 29.84 T:schwaemm192192v2 31.72 32.33 32.59 T:schwaemm256256v2 32.55 32.64 32.70 T:grain128aeadv2 40.14 40.31 40.41 romulusn 47.30 47.41 47.52 T:giftcofb128v1 49.63 49.84 50.14 romulusm 55.73 56.07 57.13 T:tinyjambu128v2 64.30 64.54 65.23 T:tinyjambu192v2 65.91 66.35 66.54 T:tinyjambu256v2 117.62 117.88 118.84 romulust 119.04 119.26 119.47 T:isapa128av20 119.03 119.38 119.58 T:elephant200v2 150.65 150.92 152.56 T:isapk128av20 348.85 349.75 349.94 T:isapa128v20 988.58 994.19 1000.41 T:isapk128v20 1594.27 1598.53 1601.21 T:isapxv20 5459.27 5472.98 5483.77 T:elephant176v2 5980.17 5982.38 5984.19 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.41 5.54 5.60 T:aes128gcmv1 5.78 5.83 5.91 aes256gcmv1 10.23 10.36 10.47 ascon128av12 13.19 13.29 13.38 ascon128v12 13.32 13.51 13.66 ascon80pqv12 16.61 16.84 16.98 T:xoodyakround3 20.40 20.48 20.74 ascon128abi32v12 22.36 22.54 22.91 T:schwaemm256128v2 25.45 25.58 25.80 T:schwaemm128128v2 26.86 27.03 27.25 ascon128bi32v12 29.25 29.68 29.84 T:schwaemm192192v2 32.43 32.64 32.84 T:grain128aeadv2 32.62 33.61 34.28 T:schwaemm256256v2 40.35 40.47 40.52 romulusn 47.45 47.59 47.74 T:giftcofb128v1 51.05 51.18 51.29 romulusm 56.05 56.35 57.12 T:tinyjambu128v2 64.30 64.80 65.15 T:tinyjambu192v2 65.97 66.30 66.56 T:tinyjambu256v2 117.84 118.24 118.94 romulust 119.34 119.64 120.00 T:isapa128av20 118.98 119.77 120.18 T:elephant200v2 150.62 151.20 151.45 T:isapk128av20 349.45 350.08 350.77 T:isapa128v20 977.81 984.79 997.38 T:isapk128v20 1599.20 1600.84 1602.73 T:isapxv20 5403.06 5412.86 5459.48 T:elephant176v2 5976.90 5983.01 5985.85 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.29 5.41 5.80 T:aes128gcmv1 5.76 5.84 5.90 aes256gcmv1 10.23 10.28 10.41 ascon128av12 13.05 13.12 13.34 ascon128v12 13.22 13.35 13.53 ascon80pqv12 16.66 17.23 17.46 T:xoodyakround3 20.30 20.43 20.59 ascon128abi32v12 22.42 22.60 22.84 T:schwaemm256128v2 25.47 25.55 25.73 T:schwaemm128128v2 26.70 26.79 26.95 ascon128bi32v12 29.23 29.40 29.52 T:schwaemm192192v2 31.77 32.20 32.44 T:schwaemm256256v2 32.38 32.57 32.66 T:grain128aeadv2 40.47 40.58 40.68 romulusn 47.45 47.59 47.75 T:giftcofb128v1 50.89 50.98 51.27 romulusm 55.89 56.24 56.43 T:tinyjambu128v2 63.99 64.21 64.91 T:tinyjambu192v2 65.77 66.22 66.57 T:tinyjambu256v2 73.66 73.92 74.15 T:isapa128av20 74.72 75.40 75.85 romulust 98.66 99.10 99.36 T:isapk128av20 119.48 119.73 120.12 T:elephant200v2 181.75 182.23 182.91 T:isapa128v20 509.80 518.46 522.87 T:isapk128v20 836.38 837.92 841.63 T:isapxv20 5401.48 5405.12 5443.82 T:elephant176v2 5971.82 5976.84 5981.93 T:elephant160v2