VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,big, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.43 1.44 1.46 T:aes128gcmv1 1.54 1.56 1.56 aes256gcmv1 6.53 6.60 6.68 ascon128av12 9.97 10.02 10.04 ascon128v12 9.96 10.11 10.18 ascon80pqv12 12.63 12.71 12.80 T:schwaemm256128v2 12.76 12.83 12.88 ascon128abi32v12 13.84 13.91 13.97 T:xoodyakround3 16.71 16.81 16.87 T:schwaemm192192v2 17.49 17.54 17.70 T:schwaemm256256v2 19.27 19.32 19.41 ascon128bi32v12 20.01 20.04 20.08 T:schwaemm128128v2 24.53 24.57 24.64 T:grain128aeadv2 38.69 38.71 38.74 romulusn 39.05 39.09 39.27 T:isapa128av20 38.73 39.29 39.46 T:isapa128v20 39.86 39.96 40.00 T:giftcofb128v1 50.46 50.85 51.57 T:isapk128av20 54.95 55.01 55.09 T:tinyjambu128v2 62.11 62.22 62.30 romulusm 66.48 66.57 66.76 T:tinyjambu192v2 68.09 68.89 69.75 T:isapk128v20 71.30 71.47 71.55 T:tinyjambu256v2 125.60 125.67 125.78 romulust 130.32 132.54 135.65 T:isapxv20 138.62 138.72 138.89 T:elephant200v2 5513.36 5518.18 5519.78 T:elephant176v2 5883.74 5885.79 5887.34 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.29 1.29 1.30 T:aes128gcmv1 1.40 1.41 1.42 aes256gcmv1 6.55 6.58 6.61 ascon128av12 9.77 9.80 10.00 ascon80pqv12 9.85 9.92 9.96 ascon128v12 12.62 12.69 12.73 T:schwaemm256128v2 12.97 13.02 13.10 ascon128abi32v12 13.75 13.80 13.89 T:xoodyakround3 16.65 16.77 16.87 T:schwaemm192192v2 17.41 17.52 17.59 T:schwaemm256256v2 19.23 19.29 19.40 ascon128bi32v12 19.87 19.90 19.95 T:schwaemm128128v2 23.86 23.89 23.93 T:grain128aeadv2 38.39 38.79 38.97 T:isapa128v20 38.78 38.81 38.86 romulusn 39.06 39.13 39.26 T:isapa128av20 39.97 40.05 40.09 T:giftcofb128v1 50.67 51.14 51.70 T:isapk128av20 54.80 54.86 55.07 T:tinyjambu128v2 62.21 62.30 62.34 romulusm 66.34 66.42 66.50 T:tinyjambu192v2 66.85 68.23 69.56 T:isapk128v20 71.31 71.35 71.42 T:tinyjambu256v2 125.63 125.70 125.85 romulust 132.17 132.57 135.78 T:isapxv20 138.23 138.54 138.72 T:elephant200v2 5504.73 5514.46 5517.47 T:elephant176v2 5883.48 5885.95 5887.23 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.29 1.29 1.30 T:aes128gcmv1 1.41 1.41 1.41 aes256gcmv1 6.55 6.58 6.61 ascon128av12 9.75 9.79 10.00 ascon80pqv12 9.78 9.87 9.93 ascon128v12 12.58 12.65 12.70 T:schwaemm256128v2 12.96 13.02 13.07 ascon128abi32v12 13.74 13.82 13.90 T:xoodyakround3 16.68 16.76 16.82 T:schwaemm192192v2 17.42 17.50 17.63 T:schwaemm256256v2 19.28 19.34 19.41 ascon128bi32v12 18.84 19.38 19.57 T:isapa128v20 19.82 19.84 19.91 T:schwaemm128128v2 23.88 23.91 23.94 T:grain128aeadv2 26.56 26.61 26.66 T:isapa128av20 33.43 33.97 34.22 T:isapk128av20 38.76 38.80 38.84 romulusn 39.98 40.02 40.07 T:giftcofb128v1 41.84 42.71 43.99 T:isapk128v20 43.24 43.32 43.42 romulust 54.78 54.84 54.89 T:tinyjambu128v2 62.26 62.32 62.41 romulusm 66.26 66.34 66.41 T:tinyjambu192v2 71.33 71.41 71.53 T:tinyjambu256v2 77.85 79.58 81.02 T:isapxv20 138.55 138.68 138.77 T:elephant200v2 5510.27 5519.84 5526.02 T:elephant176v2 5884.04 5884.75 5886.18 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.86 0.87 0.87 T:aes128gcmv1 0.92 0.92 0.93 aes256gcmv1 6.55 6.59 6.63 ascon128av12 9.96 9.97 9.98 ascon128v12 10.03 10.06 10.08 ascon80pqv12 10.71 10.74 10.83 T:xoodyakround3 12.52 12.58 12.65 T:schwaemm256128v2 13.14 13.23 13.39 ascon128abi32v12 16.63 16.69 16.75 T:schwaemm192192v2 17.38 17.45 17.50 T:schwaemm256256v2 19.44 19.48 19.51 ascon128bi32v12 19.99 20.03 20.06 T:schwaemm128128v2 24.50 24.53 24.57 T:grain128aeadv2 28.39 28.71 29.07 T:isapa128v20 31.10 31.12 31.16 romulusn 32.82 32.87 32.93 T:isapa128av20 39.90 39.93 39.96 T:giftcofb128v1 42.57 42.85 43.30 T:isapk128av20 42.84 42.87 42.91 romulusm 44.99 45.03 45.07 T:tinyjambu128v2 52.00 52.12 52.22 T:tinyjambu192v2 53.95 53.97 53.99 T:tinyjambu256v2 55.22 55.55 56.29 T:isapk128v20 84.37 84.50 84.52 romulust 103.81 103.89 103.93 T:elephant200v2 106.59 107.63 109.11 T:isapxv20 4111.71 4117.49 4120.34 T:elephant176v2 4413.11 4413.97 4415.16 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.79 0.80 0.81 T:aes128gcmv1 0.84 0.85 0.86 aes256gcmv1 6.53 6.56 6.57 ascon128av12 9.84 9.89 9.92 ascon128v12 9.87 9.89 9.92 ascon80pqv12 10.66 10.73 10.74 T:xoodyakround3 12.53 12.56 12.60 T:schwaemm256128v2 13.27 13.36 13.49 ascon128abi32v12 16.61 16.67 16.72 T:schwaemm192192v2 17.32 17.39 17.42 T:schwaemm256256v2 19.44 19.51 19.61 ascon128bi32v12 19.93 19.97 19.99 T:schwaemm128128v2 24.18 24.21 24.24 T:grain128aeadv2 28.68 28.81 29.05 T:isapa128v20 31.13 31.15 31.20 romulusn 32.82 32.89 33.00 T:isapa128av20 39.94 39.97 40.01 T:giftcofb128v1 42.47 42.66 42.78 T:isapk128av20 42.89 42.92 42.98 romulusm 44.90 44.93 45.02 T:tinyjambu128v2 52.06 52.12 52.16 T:tinyjambu192v2 53.92 53.96 54.00 T:tinyjambu256v2 55.41 56.02 56.80 T:isapk128v20 84.36 84.45 84.52 romulust 103.76 104.16 104.88 T:elephant200v2 104.54 105.15 106.44 T:isapxv20 4112.91 4117.67 4126.89 T:elephant176v2 4412.46 4413.73 4414.62 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.79 0.79 0.80 T:aes128gcmv1 0.85 0.85 0.86 aes256gcmv1 6.52 6.55 6.57 ascon128av12 9.85 9.88 9.92 ascon80pqv12 9.86 9.88 9.90 ascon128v12 10.69 10.72 10.76 T:xoodyakround3 12.54 12.56 12.60 T:schwaemm256128v2 13.19 13.29 13.43 ascon128abi32v12 16.59 16.63 16.75 T:schwaemm192192v2 17.33 17.37 17.49 T:schwaemm256256v2 18.89 19.15 19.47 T:isapa128v20 19.46 19.54 19.64 ascon128bi32v12 19.90 19.94 19.96 T:schwaemm128128v2 24.17 24.21 24.22 T:grain128aeadv2 26.64 26.67 26.71 T:isapa128av20 31.11 31.15 31.18 romulusn 34.12 34.39 34.93 T:isapk128av20 39.89 39.95 39.99 T:giftcofb128v1 41.77 42.42 42.82 T:isapk128v20 42.89 42.94 42.97 romulusm 43.22 43.27 43.35 romulust 44.88 44.95 45.04 T:tinyjambu128v2 51.96 52.04 52.10 T:tinyjambu192v2 53.92 53.96 53.99 T:tinyjambu256v2 78.07 78.99 81.17 T:isapxv20 103.90 103.95 104.02 T:elephant200v2 4116.06 4120.49 4124.11 T:elephant176v2 4412.63 4413.13 4414.26 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.30 0.32 0.33 aes256gcmv1 6.53 6.56 6.59 ascon128av12 7.53 7.59 7.64 T:xoodyakround3 9.88 9.91 9.95 ascon128v12 9.90 9.93 9.95 ascon80pqv12 12.42 12.49 12.56 T:schwaemm256128v2 13.36 13.49 13.64 ascon128abi32v12 16.44 16.54 16.69 T:schwaemm192192v2 17.23 17.36 17.46 T:schwaemm256256v2 18.78 18.83 18.98 T:isapa128v20 19.51 19.62 19.70 ascon128bi32v12 19.97 20.00 20.05 T:schwaemm128128v2 23.44 23.49 23.56 romulusn 23.44 23.50 23.53 romulusm 24.51 24.55 24.59 T:grain128aeadv2 26.59 26.65 26.68 T:isapa128av20 33.71 33.99 34.68 T:isapk128av20 34.94 35.06 35.14 T:tinyjambu128v2 36.29 36.35 36.46 T:tinyjambu256v2 37.49 37.57 37.62 T:tinyjambu192v2 39.85 39.95 40.01 T:giftcofb128v1 40.99 41.71 42.42 T:isapk128v20 43.15 43.19 43.24 romulust 69.51 69.56 69.63 T:elephant200v2 78.09 79.48 80.68 T:isapxv20 2721.08 2724.08 2732.24 T:elephant176v2 2940.66 2941.23 2942.35 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.29 0.31 0.32 aes256gcmv1 0.29 0.31 0.32 T:aes128gcmv1 6.54 6.56 6.59 ascon128av12 7.56 7.62 7.68 T:xoodyakround3 9.86 9.88 9.94 ascon80pqv12 9.87 9.90 9.95 ascon128v12 12.45 12.50 12.57 T:schwaemm256128v2 13.46 13.65 13.82 ascon128abi32v12 16.49 16.58 16.64 T:schwaemm192192v2 17.21 17.30 17.44 T:schwaemm256256v2 18.77 18.83 18.92 T:isapa128v20 19.51 19.63 19.75 ascon128bi32v12 19.99 20.02 20.06 T:schwaemm128128v2 23.45 23.49 23.55 romulusm 23.48 23.54 23.59 romulusn 24.47 24.51 24.57 T:grain128aeadv2 26.59 26.64 26.69 T:isapa128av20 33.60 33.76 34.08 T:isapk128av20 34.95 35.00 35.13 T:tinyjambu128v2 36.29 36.36 36.54 T:tinyjambu256v2 37.65 37.74 37.80 T:tinyjambu192v2 39.81 39.94 40.01 T:giftcofb128v1 40.98 41.84 42.63 T:isapk128v20 43.11 43.21 43.28 romulust 69.39 69.54 69.72 T:elephant200v2 77.97 78.47 81.62 T:isapxv20 2721.04 2724.50 2727.22 T:elephant176v2 2941.08 2942.30 2943.77 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.31 aes256gcmv1 0.30 0.31 0.32 T:aes128gcmv1 6.53 6.56 6.58 ascon128av12 7.56 7.61 7.69 T:xoodyakround3 9.88 9.92 9.96 ascon128v12 9.93 9.98 10.02 ascon80pqv12 12.38 12.47 12.49 T:schwaemm256128v2 13.28 13.55 13.83 ascon128abi32v12 16.53 16.62 16.72 T:schwaemm192192v2 17.24 17.33 17.40 T:schwaemm256256v2 18.85 18.99 19.59 T:isapa128v20 19.44 19.57 19.67 ascon128bi32v12 19.90 19.95 20.02 T:schwaemm128128v2 23.44 23.50 23.58 romulusn 23.45 23.51 23.54 romulusm 24.48 24.51 24.55 T:grain128aeadv2 26.59 26.65 26.70 T:isapa128av20 33.27 33.58 33.97 T:isapk128av20 34.88 34.96 35.13 T:tinyjambu128v2 36.43 36.48 36.57 T:tinyjambu256v2 37.51 37.58 37.63 T:tinyjambu192v2 39.91 39.97 40.05 T:giftcofb128v1 40.82 41.88 42.86 T:isapk128v20 43.15 43.21 43.27 romulust 69.61 69.70 69.81 T:elephant200v2 78.00 80.64 80.97 T:isapxv20 2724.09 2726.39 2729.99 T:elephant176v2 2939.82 2941.58 2942.38 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.98 0.99 0.99 T:aes128gcmv1 1.06 1.06 1.06 aes256gcmv1 6.72 6.74 6.78 ascon128av12 10.07 10.10 10.11 ascon128v12 10.13 10.15 10.17 ascon80pqv12 10.85 10.87 10.88 T:xoodyakround3 12.92 12.97 12.99 T:schwaemm256128v2 13.36 13.43 13.57 ascon128abi32v12 16.98 17.06 17.10 T:schwaemm192192v2 17.88 17.94 18.01 T:schwaemm256256v2 19.77 19.84 19.88 ascon128bi32v12 20.25 20.26 20.28 T:schwaemm128128v2 24.83 24.85 24.87 T:grain128aeadv2 31.38 31.40 31.42 romulusn 35.16 35.19 35.33 T:isapa128av20 40.26 40.29 40.31 T:giftcofb128v1 41.77 42.03 42.19 T:isapa128v20 43.16 43.19 43.24 romulusm 45.50 45.53 45.56 T:tinyjambu128v2 47.58 47.72 47.98 T:isapk128av20 52.65 52.71 52.80 T:tinyjambu192v2 54.41 54.48 54.53 T:tinyjambu256v2 85.72 85.73 85.78 romulust 95.07 95.52 95.81 T:isapk128v20 106.05 106.10 106.21 T:elephant200v2 174.62 175.30 177.31 T:isapxv20 4147.98 4150.78 4153.63 T:elephant176v2 4463.14 4463.51 4464.79 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.92 0.92 0.92 T:aes128gcmv1 0.99 0.99 1.00 aes256gcmv1 6.68 6.70 6.73 ascon128av12 9.97 10.02 10.06 ascon80pqv12 9.97 10.03 10.07 ascon128v12 10.80 10.81 10.83 T:xoodyakround3 12.83 12.90 12.96 T:schwaemm256128v2 13.42 13.55 13.69 ascon128abi32v12 17.03 17.07 17.14 T:schwaemm192192v2 17.84 17.93 18.00 T:schwaemm256256v2 19.79 19.83 19.90 ascon128bi32v12 20.20 20.24 20.27 T:schwaemm128128v2 24.55 24.57 24.58 T:grain128aeadv2 31.44 31.47 31.50 romulusn 35.15 35.18 35.24 T:isapa128av20 40.30 40.33 40.38 T:giftcofb128v1 41.83 42.17 42.34 T:isapa128v20 43.27 43.29 43.32 romulusm 45.38 45.41 45.45 T:tinyjambu128v2 47.40 47.76 48.05 T:isapk128av20 52.47 52.58 52.67 T:tinyjambu192v2 54.40 54.44 54.49 T:tinyjambu256v2 85.72 85.76 85.80 romulust 94.52 95.06 95.27 T:isapk128v20 106.28 106.35 106.59 T:elephant200v2 177.15 178.40 180.30 T:isapxv20 4146.88 4150.60 4155.00 T:elephant176v2 4463.03 4463.71 4464.45 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.92 0.92 0.92 T:aes128gcmv1 0.99 0.99 1.00 aes256gcmv1 6.68 6.71 6.73 ascon128av12 9.98 10.01 10.04 ascon80pqv12 10.01 10.04 10.07 ascon128v12 10.83 10.85 10.87 T:xoodyakround3 12.92 12.95 12.97 T:schwaemm256128v2 13.60 13.74 13.81 ascon128abi32v12 16.98 17.03 17.09 T:schwaemm192192v2 17.84 17.87 17.94 T:schwaemm256256v2 19.83 19.86 19.92 ascon128bi32v12 20.16 20.21 20.25 T:schwaemm128128v2 24.53 24.55 24.59 T:grain128aeadv2 25.55 25.86 25.97 T:isapa128v20 27.91 27.97 27.99 T:isapa128av20 31.45 31.48 31.49 romulusn 37.09 37.21 37.44 T:isapk128av20 40.28 40.30 40.33 T:giftcofb128v1 43.26 43.31 43.34 romulusm 44.50 44.55 44.61 romulust 45.40 45.43 45.48 T:tinyjambu128v2 52.45 52.51 52.62 T:tinyjambu192v2 54.43 54.45 54.51 T:tinyjambu256v2 62.59 62.91 63.30 T:isapk128v20 106.24 106.32 106.38 T:elephant200v2 113.58 114.03 118.31 T:isapxv20 4146.85 4149.51 4153.51 T:elephant176v2 4462.51 4463.60 4464.65 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.50 5.53 5.62 T:aes128gcmv1 6.05 6.09 6.15 aes256gcmv1 9.99 10.11 10.27 ascon128av12 13.01 13.05 13.20 ascon128v12 13.08 13.20 13.25 ascon80pqv12 16.07 16.35 16.88 T:xoodyakround3 20.09 20.28 20.70 ascon128abi32v12 20.94 21.20 21.44 T:schwaemm256128v2 25.60 25.80 26.30 T:schwaemm128128v2 26.88 26.96 27.17 ascon128bi32v12 27.42 27.59 28.12 T:schwaemm192192v2 28.12 28.71 28.98 T:schwaemm256256v2 32.53 32.66 32.85 T:grain128aeadv2 37.99 38.10 38.19 romulusn 47.58 47.69 47.84 T:giftcofb128v1 50.46 50.58 50.76 romulusm 55.71 56.44 56.63 T:tinyjambu128v2 64.26 64.59 64.81 T:tinyjambu192v2 65.99 66.55 66.74 T:tinyjambu256v2 88.04 88.45 88.64 T:isapa128av20 114.38 114.54 114.70 romulust 149.92 150.38 150.73 T:elephant200v2 152.14 152.36 152.79 T:isapk128av20 342.73 343.58 344.03 T:isapa128v20 992.63 999.21 1001.45 T:isapk128v20 1739.11 1739.91 1758.45 T:isapxv20 5162.87 5171.07 5192.50 T:elephant176v2 5975.50 5978.42 5981.44 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.77 4.84 4.91 T:aes128gcmv1 5.55 5.62 5.88 aes256gcmv1 10.02 10.12 10.22 ascon128av12 13.02 13.16 13.36 ascon80pqv12 13.04 13.25 13.43 ascon128v12 15.79 15.88 16.36 T:xoodyakround3 20.15 20.45 20.88 ascon128abi32v12 21.18 21.41 21.75 T:schwaemm256128v2 25.52 25.68 26.02 T:schwaemm128128v2 27.05 27.54 28.07 ascon128bi32v12 27.57 27.82 28.44 T:schwaemm192192v2 28.27 28.67 29.21 T:schwaemm256256v2 32.22 32.34 32.55 T:grain128aeadv2 38.22 38.47 38.75 romulusn 47.84 47.91 48.02 T:giftcofb128v1 52.28 52.49 52.63 romulusm 55.91 56.50 57.25 T:tinyjambu128v2 64.07 64.48 64.87 T:tinyjambu192v2 66.12 66.41 66.98 T:tinyjambu256v2 87.98 88.09 88.29 T:isapa128av20 114.52 114.82 115.62 romulust 149.94 150.30 150.74 T:elephant200v2 152.52 152.77 153.62 T:isapk128av20 342.90 343.26 344.34 T:isapa128v20 987.51 996.91 1010.72 T:isapk128v20 1736.70 1745.02 1748.29 T:isapxv20 5174.80 5175.56 5180.91 T:elephant176v2 5977.14 5978.73 5981.30 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.79 4.83 4.91 T:aes128gcmv1 5.53 5.60 5.69 aes256gcmv1 10.03 10.12 10.22 ascon128av12 12.98 13.05 13.21 ascon80pqv12 13.09 13.16 13.31 ascon128v12 15.89 16.43 16.98 T:xoodyakround3 19.99 20.45 20.82 ascon128abi32v12 21.12 21.34 21.55 T:schwaemm256128v2 25.40 25.49 25.55 T:schwaemm128128v2 26.83 27.30 27.77 ascon128bi32v12 27.33 27.73 28.05 T:schwaemm192192v2 28.27 28.70 28.92 T:schwaemm256256v2 32.34 32.46 32.52 T:grain128aeadv2 38.26 38.49 38.53 romulusn 47.91 48.00 48.14 T:giftcofb128v1 52.27 52.48 52.73 romulusm 55.89 56.11 56.28 T:tinyjambu128v2 57.91 58.30 58.62 T:isapa128av20 64.01 64.43 64.49 T:tinyjambu192v2 65.60 66.28 66.66 T:tinyjambu256v2 72.68 73.06 73.62 romulust 100.56 100.82 101.22 T:isapk128av20 149.46 149.67 149.84 T:elephant200v2 178.76 179.07 179.47 T:isapa128v20 516.24 522.88 528.45 T:isapk128v20 910.71 914.75 928.59 T:isapxv20 5166.88 5176.77 5182.34 T:elephant176v2 5974.60 5977.83 5981.16 T:elephant160v2