VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.25 1.27 1.28 T:aes128gcmv1 1.40 1.42 1.43 aes256gcmv1 6.19 6.21 6.24 ascon128av12 9.19 9.20 9.23 ascon80pqv12 9.20 9.22 9.25 ascon128v12 11.45 11.47 11.49 ascon128abi32v12 14.16 14.30 14.38 T:xoodyakround3 15.42 15.69 16.13 T:schwaemm256128v2 16.21 16.32 16.34 ascon128bi32v12 20.67 20.75 21.03 T:schwaemm192192v2 21.81 21.95 22.49 T:schwaemm256256v2 22.63 22.65 22.70 T:schwaemm128128v2 27.07 27.10 27.15 T:grain128aeadv2 35.02 35.08 35.18 T:isapa128av20 36.23 36.25 36.36 romulusn 36.69 36.75 36.83 T:isapa128v20 39.62 39.65 39.67 T:giftcofb128v1 51.77 51.81 51.84 T:tinyjambu128v2 59.52 59.57 59.62 romulusm 59.60 59.64 59.67 T:tinyjambu192v2 60.05 60.15 60.40 T:isapk128av20 62.78 62.81 62.85 T:tinyjambu256v2 79.49 79.83 80.87 T:isapk128v20 121.31 121.35 121.40 romulust 157.42 158.39 159.43 T:isapxv20 185.10 185.17 185.48 T:elephant200v2 6428.35 6432.64 6435.02 T:elephant176v2 7525.50 7546.31 7548.95 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.24 1.26 1.27 T:aes128gcmv1 1.39 1.42 1.43 aes256gcmv1 6.20 6.22 6.25 ascon128av12 9.13 9.16 9.17 ascon128v12 9.24 9.26 9.30 ascon80pqv12 11.34 11.36 11.38 ascon128abi32v12 14.13 14.17 14.24 T:xoodyakround3 15.55 15.79 16.14 T:schwaemm256128v2 16.36 16.39 16.40 ascon128bi32v12 20.67 20.69 21.00 T:schwaemm192192v2 21.92 22.01 22.49 T:schwaemm256256v2 22.62 22.64 22.68 T:schwaemm128128v2 27.60 27.66 27.69 T:grain128aeadv2 34.92 35.05 35.13 T:isapa128av20 36.26 36.37 36.45 romulusn 36.78 36.87 36.90 T:isapa128v20 39.75 39.76 39.80 T:giftcofb128v1 51.89 51.95 51.97 T:tinyjambu128v2 59.63 59.66 59.75 T:tinyjambu192v2 59.63 59.68 59.77 romulusm 59.94 60.06 60.20 T:isapk128av20 62.74 62.79 62.82 T:tinyjambu256v2 79.44 79.65 80.06 T:isapk128v20 121.34 121.37 121.40 romulust 157.30 157.83 158.62 T:isapxv20 184.77 184.96 185.05 T:elephant200v2 6428.65 6433.35 6447.91 T:elephant176v2 7527.19 7545.71 7548.84 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.24 1.25 1.26 T:aes128gcmv1 1.40 1.40 1.42 aes256gcmv1 6.20 6.23 6.25 ascon128av12 9.15 9.17 9.20 ascon128v12 9.24 9.27 9.28 ascon80pqv12 11.35 11.37 11.39 ascon128abi32v12 14.19 14.23 14.28 T:xoodyakround3 15.80 15.87 16.14 T:schwaemm256128v2 16.35 16.39 16.41 ascon128bi32v12 18.50 18.54 18.60 T:isapa128v20 20.68 20.70 21.11 T:schwaemm192192v2 21.81 21.96 22.53 T:schwaemm256256v2 22.62 22.66 22.69 T:schwaemm128128v2 23.52 23.71 23.77 T:isapa128av20 27.58 27.66 27.70 T:grain128aeadv2 36.27 36.33 36.43 romulusn 39.76 39.78 39.83 T:giftcofb128v1 40.04 40.17 40.40 T:isapk128av20 41.50 41.59 41.62 romulust 49.83 49.95 50.14 T:isapk128v20 51.89 51.91 51.95 T:tinyjambu128v2 59.62 59.66 59.72 T:tinyjambu192v2 59.61 59.68 59.74 romulusm 62.68 62.74 62.80 T:tinyjambu256v2 92.53 92.94 93.24 T:isapxv20 184.78 184.87 185.04 T:elephant200v2 6427.79 6432.45 6435.25 T:elephant176v2 7525.61 7546.42 7548.82 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.84 0.86 0.87 T:aes128gcmv1 0.92 0.94 0.95 aes256gcmv1 6.14 6.17 6.19 ascon128av12 9.15 9.18 9.20 ascon80pqv12 9.18 9.19 9.22 ascon128v12 10.80 10.88 10.99 T:xoodyakround3 11.18 11.21 11.23 ascon128abi32v12 15.63 15.76 15.77 T:schwaemm256128v2 16.30 16.33 16.43 ascon128bi32v12 20.57 20.69 20.77 T:schwaemm192192v2 21.87 21.98 22.46 T:schwaemm256256v2 22.55 22.58 22.59 T:schwaemm128128v2 27.10 27.12 27.17 T:grain128aeadv2 27.68 27.71 27.76 T:isapa128v20 29.29 29.42 29.44 T:isapa128av20 29.75 29.77 29.79 romulusn 39.59 39.62 39.64 T:giftcofb128v1 41.36 41.40 41.43 romulusm 42.42 42.46 42.53 T:tinyjambu128v2 46.41 46.43 46.47 T:tinyjambu192v2 47.20 47.23 47.27 T:tinyjambu256v2 49.82 50.03 50.13 T:isapk128av20 64.74 64.87 65.15 T:isapk128v20 81.43 81.47 81.55 romulust 125.47 126.20 126.56 T:isapxv20 139.12 139.23 139.29 T:elephant200v2 4802.73 4820.90 4823.87 T:elephant176v2 5681.31 5682.14 5684.22 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.84 0.86 0.87 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.21 6.23 6.25 ascon128av12 9.14 9.17 9.18 ascon128v12 9.15 9.20 9.22 ascon80pqv12 10.82 10.89 10.94 T:xoodyakround3 11.12 11.14 11.16 ascon128abi32v12 15.75 15.76 15.78 T:schwaemm256128v2 16.35 16.38 16.40 ascon128bi32v12 20.51 20.55 20.64 T:schwaemm192192v2 21.92 21.99 22.45 T:schwaemm256256v2 22.54 22.57 22.60 T:schwaemm128128v2 27.32 27.39 27.43 T:grain128aeadv2 27.65 27.69 27.73 T:isapa128v20 29.24 29.29 29.42 T:isapa128av20 29.76 29.81 29.86 romulusn 39.67 39.69 39.72 T:giftcofb128v1 41.41 41.46 41.50 romulusm 42.42 42.51 42.60 T:tinyjambu128v2 46.42 46.45 46.48 T:tinyjambu192v2 47.11 47.14 47.16 T:tinyjambu256v2 49.79 49.99 50.09 T:isapk128av20 64.74 64.87 65.01 T:isapk128v20 81.41 81.46 81.51 romulust 125.28 125.75 126.45 T:isapxv20 138.92 139.11 139.17 T:elephant200v2 4803.80 4821.09 4823.59 T:elephant176v2 5681.83 5683.78 5684.26 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.85 0.86 0.86 T:aes128gcmv1 0.93 0.93 0.93 aes256gcmv1 6.22 6.23 6.25 ascon128av12 9.15 9.15 9.17 ascon128v12 9.18 9.21 9.24 ascon80pqv12 10.85 10.88 10.92 T:xoodyakround3 11.13 11.14 11.16 ascon128abi32v12 15.74 15.77 15.78 T:schwaemm256128v2 16.36 16.38 16.39 ascon128bi32v12 18.53 18.56 18.59 T:isapa128v20 20.53 20.57 20.71 T:schwaemm192192v2 21.89 21.97 22.40 T:schwaemm256256v2 22.56 22.57 22.61 T:schwaemm128128v2 23.52 23.58 23.69 T:isapa128av20 27.34 27.38 27.43 T:grain128aeadv2 29.74 29.82 29.85 romulusn 39.67 39.69 39.72 T:giftcofb128v1 39.93 40.01 40.24 T:isapk128av20 41.43 41.45 41.47 romulusm 41.53 41.57 41.61 romulust 42.38 42.42 42.52 T:tinyjambu128v2 46.44 46.46 46.48 T:tinyjambu192v2 47.13 47.15 47.17 T:tinyjambu256v2 49.86 49.99 50.19 T:isapk128v20 92.91 93.01 93.16 T:isapxv20 138.94 139.08 139.25 T:elephant200v2 4802.03 4821.07 4823.48 T:elephant176v2 5680.80 5682.76 5684.92 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.44 0.46 0.47 T:aes128gcmv1 0.45 0.47 0.48 aes256gcmv1 6.08 6.10 6.12 ascon128av12 7.53 7.55 7.60 T:xoodyakround3 9.13 9.14 9.17 ascon80pqv12 9.12 9.15 9.17 ascon128v12 10.92 10.94 10.95 ascon128abi32v12 15.55 15.59 15.91 T:schwaemm256128v2 16.29 16.51 16.54 ascon128bi32v12 18.51 18.57 18.60 T:isapa128v20 20.57 20.61 20.96 T:schwaemm192192v2 21.86 21.95 22.40 T:schwaemm256256v2 22.48 22.51 22.55 T:schwaemm128128v2 23.23 23.26 23.30 romulusn 23.24 23.27 23.28 romulusm 23.52 23.63 23.65 T:isapa128av20 27.12 27.14 27.18 T:grain128aeadv2 31.60 31.65 32.48 T:tinyjambu256v2 32.87 33.12 33.36 T:tinyjambu128v2 33.20 33.23 33.24 T:tinyjambu192v2 39.51 39.60 39.63 T:giftcofb128v1 39.84 39.98 40.13 T:isapk128av20 41.53 41.55 41.59 romulust 49.82 50.01 50.25 T:isapk128v20 91.91 92.73 93.17 T:isapxv20 93.03 93.07 93.21 T:elephant200v2 3175.35 3194.18 3196.58 T:elephant176v2 3770.58 3772.28 3777.19 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.45 0.47 0.47 T:aes128gcmv1 0.46 0.47 0.48 aes256gcmv1 6.22 6.23 6.25 ascon128av12 7.52 7.55 7.62 T:xoodyakround3 9.13 9.15 9.16 ascon80pqv12 9.13 9.15 9.18 ascon128v12 10.89 10.91 10.94 ascon128abi32v12 15.56 15.60 15.68 T:schwaemm256128v2 16.34 16.37 16.40 ascon128bi32v12 18.54 18.59 18.62 T:isapa128v20 20.46 20.70 20.95 T:schwaemm192192v2 21.85 21.93 22.39 T:schwaemm256256v2 22.48 22.51 22.57 T:schwaemm128128v2 23.22 23.24 23.27 romulusm 23.22 23.24 23.27 romulusn 23.42 23.57 23.77 T:isapa128av20 27.12 27.18 27.23 T:grain128aeadv2 31.43 31.52 31.54 T:tinyjambu256v2 32.88 33.22 33.34 T:tinyjambu128v2 33.22 33.23 33.25 T:tinyjambu192v2 39.50 39.61 39.64 T:giftcofb128v1 39.81 39.97 40.09 T:isapk128av20 41.51 41.56 41.59 romulust 49.67 49.90 50.12 T:isapk128v20 92.03 92.22 92.59 T:isapxv20 93.00 93.07 93.20 T:elephant200v2 3175.37 3194.23 3195.07 T:elephant176v2 3771.10 3772.31 3777.81 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.46 0.46 0.47 T:aes128gcmv1 0.46 0.46 0.47 aes256gcmv1 6.22 6.24 6.26 ascon128av12 7.52 7.57 7.61 T:xoodyakround3 9.11 9.15 9.17 ascon128v12 9.14 9.15 9.17 ascon80pqv12 10.90 10.92 10.94 ascon128abi32v12 15.56 15.59 15.67 T:schwaemm256128v2 16.35 16.36 16.39 ascon128bi32v12 18.54 18.58 18.62 T:isapa128v20 20.46 20.61 20.93 T:schwaemm192192v2 21.84 21.93 22.37 T:schwaemm256256v2 22.49 22.52 22.55 T:schwaemm128128v2 23.21 23.25 23.28 romulusm 23.24 23.26 23.27 romulusn 23.44 23.67 23.79 T:isapa128av20 27.16 27.19 27.27 T:grain128aeadv2 31.43 31.49 31.56 T:tinyjambu256v2 33.10 33.19 33.34 T:tinyjambu128v2 33.21 33.23 33.25 T:tinyjambu192v2 39.48 39.59 39.62 T:giftcofb128v1 39.90 39.99 40.08 T:isapk128av20 41.52 41.59 41.64 romulust 49.64 49.96 50.14 T:isapk128v20 92.04 92.49 93.06 T:isapxv20 93.00 93.05 93.24 T:elephant200v2 3175.40 3194.33 3196.93 T:elephant176v2 3771.63 3773.46 3777.80 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.31 6.31 6.35 ascon128av12 9.33 9.34 9.36 ascon80pqv12 9.33 9.35 9.35 ascon128v12 10.95 11.00 11.07 T:xoodyakround3 11.46 11.47 11.49 ascon128abi32v12 16.23 16.25 16.46 T:schwaemm256128v2 16.64 16.66 16.75 ascon128bi32v12 21.15 21.24 21.27 T:schwaemm192192v2 22.56 22.60 23.00 T:schwaemm256256v2 22.86 22.88 22.89 T:schwaemm128128v2 27.41 27.44 27.46 T:grain128aeadv2 30.13 30.15 30.17 romulusn 31.71 31.75 31.80 T:isapa128av20 39.95 39.97 39.99 T:giftcofb128v1 40.45 40.48 40.59 T:isapa128v20 41.72 41.75 41.77 romulusm 42.64 42.72 42.84 T:tinyjambu128v2 46.76 46.79 46.81 T:tinyjambu192v2 47.59 47.61 47.66 T:tinyjambu256v2 57.91 58.02 58.10 T:isapk128av20 82.65 82.67 82.72 romulust 114.09 114.42 114.91 T:isapk128v20 142.01 142.14 142.20 T:elephant200v2 202.37 202.93 203.39 T:isapxv20 4831.35 4865.64 4867.78 T:elephant176v2 5720.91 5722.00 5739.91 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.95 0.95 0.95 T:aes128gcmv1 1.03 1.04 1.05 aes256gcmv1 6.39 6.40 6.41 ascon128av12 9.29 9.30 9.32 ascon128v12 9.31 9.34 9.36 ascon80pqv12 10.98 11.02 11.07 T:xoodyakround3 11.40 11.40 11.44 ascon128abi32v12 16.25 16.26 16.45 T:schwaemm256128v2 16.69 16.70 16.72 ascon128bi32v12 21.06 21.24 21.32 T:schwaemm192192v2 22.53 22.56 22.97 T:schwaemm256256v2 22.87 22.88 22.89 T:schwaemm128128v2 27.70 27.74 27.77 T:grain128aeadv2 30.13 30.14 30.19 romulusn 31.61 31.71 31.80 T:isapa128av20 40.03 40.06 40.07 T:giftcofb128v1 40.46 40.47 40.51 T:isapa128v20 41.89 41.93 41.96 romulusm 42.76 42.83 42.90 T:tinyjambu128v2 46.79 46.81 46.83 T:tinyjambu192v2 47.48 47.50 47.53 T:tinyjambu256v2 57.89 57.99 58.08 T:isapk128av20 82.64 82.66 82.69 romulust 114.10 114.30 114.48 T:isapk128v20 141.98 142.00 142.05 T:elephant200v2 202.70 203.07 203.65 T:isapxv20 4831.20 4865.38 4867.05 T:elephant176v2 5720.49 5721.72 5739.45 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.94 0.95 0.95 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.37 6.38 6.39 ascon128av12 9.29 9.30 9.32 ascon128v12 9.31 9.35 9.37 ascon80pqv12 11.02 11.04 11.11 T:xoodyakround3 11.40 11.40 11.41 ascon128abi32v12 16.17 16.25 16.46 T:schwaemm256128v2 16.68 16.69 16.71 ascon128bi32v12 21.14 21.20 21.23 T:schwaemm192192v2 22.53 22.59 22.98 T:schwaemm256256v2 22.85 22.86 22.90 T:schwaemm128128v2 24.92 25.00 25.03 T:isapa128av20 25.03 25.04 25.10 T:isapa128v20 27.71 27.72 27.76 T:grain128aeadv2 29.99 30.11 30.16 romulusn 40.05 40.06 40.08 T:giftcofb128v1 41.90 41.93 41.94 romulusm 42.73 42.75 42.76 romulust 42.80 42.85 42.88 T:tinyjambu128v2 45.18 45.27 45.33 T:isapk128av20 46.79 46.80 46.83 T:tinyjambu192v2 47.46 47.48 47.53 T:tinyjambu256v2 76.19 76.24 76.34 T:isapk128v20 132.34 132.47 132.72 T:isapxv20 141.84 141.93 142.02 T:elephant200v2 4831.16 4865.04 4867.17 T:elephant176v2 5720.78 5721.72 5738.59 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.63 4.74 4.79 T:aes128gcmv1 5.18 5.22 5.40 aes256gcmv1 9.64 9.79 10.27 ascon128av12 12.31 12.38 12.81 ascon128v12 12.42 12.78 12.98 ascon80pqv12 16.02 16.18 16.48 T:xoodyakround3 17.29 17.40 18.16 ascon128abi32v12 23.89 23.98 24.43 ascon128bi32v12 26.59 27.09 27.33 T:schwaemm256128v2 29.21 29.44 29.88 T:schwaemm128128v2 34.26 34.86 35.34 T:schwaemm192192v2 35.28 35.47 35.90 T:grain128aeadv2 35.91 36.18 37.05 T:schwaemm256256v2 38.12 38.16 38.34 romulusn 47.66 47.81 48.06 T:giftcofb128v1 48.77 48.98 49.27 T:tinyjambu128v2 50.31 50.39 50.99 romulusm 54.67 54.80 55.03 T:tinyjambu192v2 55.73 55.87 56.12 T:tinyjambu256v2 85.23 85.68 85.97 T:isapa128av20 110.33 110.60 110.96 romulust 200.82 201.02 201.52 T:elephant200v2 228.39 228.88 231.16 T:isapk128av20 333.81 333.96 334.40 T:isapa128v20 1232.76 1234.14 1237.73 T:isapk128v20 1953.96 1958.45 1964.13 T:isapxv20 6022.53 6052.48 6057.18 T:elephant176v2 7653.42 7655.47 7685.05 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.54 4.59 4.65 T:aes128gcmv1 5.02 5.08 5.25 aes256gcmv1 9.63 9.80 10.34 ascon128av12 12.30 12.44 12.81 ascon128v12 12.43 12.64 13.18 ascon80pqv12 16.08 16.45 17.05 T:xoodyakround3 17.29 17.60 18.15 ascon128abi32v12 23.90 23.95 24.12 ascon128bi32v12 26.57 26.70 27.16 T:schwaemm256128v2 29.21 29.42 29.61 T:schwaemm128128v2 34.33 34.63 35.09 T:schwaemm192192v2 35.19 35.41 36.12 T:grain128aeadv2 35.93 36.03 37.12 T:schwaemm256256v2 38.11 38.30 38.42 romulusn 48.22 48.30 48.52 T:giftcofb128v1 48.91 49.09 49.45 T:tinyjambu128v2 52.76 52.84 52.93 romulusm 54.78 54.86 55.09 T:tinyjambu192v2 55.34 55.52 55.70 T:tinyjambu256v2 85.31 85.60 85.69 T:isapa128av20 110.40 110.62 110.72 romulust 200.56 200.71 200.97 T:elephant200v2 228.58 229.02 232.20 T:isapk128av20 334.18 334.52 334.87 T:isapa128v20 1231.50 1233.23 1236.62 T:isapk128v20 1962.88 1964.34 1975.05 T:isapxv20 6049.10 6052.19 6056.20 T:elephant176v2 7653.21 7654.95 7687.91 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.52 4.57 4.61 T:aes128gcmv1 4.98 5.02 5.05 aes256gcmv1 9.70 9.73 9.80 ascon128av12 12.34 12.38 12.46 ascon128v12 12.38 12.50 12.78 ascon80pqv12 16.00 16.43 16.52 T:xoodyakround3 17.26 17.34 17.50 ascon128abi32v12 23.80 23.90 23.98 ascon128bi32v12 26.55 26.62 26.70 T:schwaemm256128v2 29.22 29.37 29.55 T:schwaemm128128v2 34.27 34.57 34.88 T:schwaemm192192v2 35.12 35.29 35.41 T:grain128aeadv2 35.97 36.30 37.06 T:schwaemm256256v2 38.25 38.30 38.45 romulusn 48.12 48.16 48.39 T:giftcofb128v1 48.81 48.96 49.05 T:tinyjambu128v2 52.63 52.69 52.87 romulusm 54.65 54.78 54.91 T:tinyjambu192v2 54.79 55.14 55.58 T:isapa128av20 55.18 55.33 55.50 T:tinyjambu256v2 69.42 69.68 70.17 romulust 153.21 156.00 157.53 T:isapk128av20 174.16 174.42 175.00 T:isapa128v20 200.64 200.82 200.98 T:elephant200v2 668.01 670.39 672.07 T:isapk128v20 1025.33 1027.10 1028.16 T:isapxv20 6050.45 6052.07 6056.80 T:elephant176v2 7653.80 7655.27 7659.11 T:elephant160v2