VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20251222

[Page version: 20260203 05:36:03]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.25 1.27 1.28 T:aes128gcmv1 1.40 1.42 1.43 aes256gcmv1 6.19 6.21 6.24 ascon128av12 9.19 9.20 9.23 ascon80pqv12 9.20 9.22 9.25 ascon128v12 11.45 11.47 11.49 ascon128abi32v12 14.16 14.30 14.38 T:xoodyakround3 15.42 15.69 16.13 T:schwaemm256128v2 16.21 16.32 16.34 ascon128bi32v12 20.67 20.75 21.03 T:schwaemm192192v2 21.81 21.95 22.49 T:schwaemm256256v2 22.63 22.65 22.70 T:schwaemm128128v2 27.07 27.10 27.15 T:grain128aeadv2 35.02 35.08 35.18 T:isapa128av20 36.23 36.25 36.36 romulusn 36.69 36.75 36.83 T:isapa128v20 39.62 39.65 39.67 T:giftcofb128v1 51.77 51.81 51.84 T:tinyjambu128v2 59.52 59.57 59.62 romulusm 59.60 59.64 59.67 T:tinyjambu192v2 60.05 60.15 60.40 T:isapk128av20 62.78 62.81 62.85 T:tinyjambu256v2 79.49 79.83 80.87 T:isapk128v20 121.31 121.35 121.40 romulust 157.42 158.39 159.43 T:isapxv20 185.10 185.17 185.48 T:elephant200v2 6428.35 6432.64 6435.02 T:elephant176v2 7525.50 7546.31 7548.95 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.24 1.26 1.27 T:aes128gcmv1 1.39 1.42 1.43 aes256gcmv1 6.20 6.22 6.25 ascon128av12 9.13 9.16 9.17 ascon128v12 9.24 9.26 9.30 ascon80pqv12 11.34 11.36 11.38 ascon128abi32v12 14.13 14.17 14.24 T:xoodyakround3 15.55 15.79 16.14 T:schwaemm256128v2 16.36 16.39 16.40 ascon128bi32v12 20.67 20.69 21.00 T:schwaemm192192v2 21.92 22.01 22.49 T:schwaemm256256v2 22.62 22.64 22.68 T:schwaemm128128v2 27.60 27.66 27.69 T:grain128aeadv2 34.92 35.05 35.13 T:isapa128av20 36.26 36.37 36.45 romulusn 36.78 36.87 36.90 T:isapa128v20 39.75 39.76 39.80 T:giftcofb128v1 51.89 51.95 51.97 T:tinyjambu128v2 59.63 59.66 59.75 T:tinyjambu192v2 59.63 59.68 59.77 romulusm 59.94 60.06 60.20 T:isapk128av20 62.74 62.79 62.82 T:tinyjambu256v2 79.44 79.65 80.06 T:isapk128v20 121.34 121.37 121.40 romulust 157.30 157.83 158.62 T:isapxv20 184.77 184.96 185.05 T:elephant200v2 6428.65 6433.35 6447.91 T:elephant176v2 7527.19 7545.71 7548.84 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.24 1.25 1.26 T:aes128gcmv1 1.40 1.40 1.42 aes256gcmv1 6.20 6.23 6.25 ascon128av12 9.15 9.17 9.20 ascon128v12 9.24 9.27 9.28 ascon80pqv12 11.35 11.37 11.39 ascon128abi32v12 14.19 14.23 14.28 T:xoodyakround3 15.80 15.87 16.14 T:schwaemm256128v2 16.35 16.39 16.41 ascon128bi32v12 18.50 18.54 18.60 T:isapa128v20 20.68 20.70 21.11 T:schwaemm192192v2 21.81 21.96 22.53 T:schwaemm256256v2 22.62 22.66 22.69 T:schwaemm128128v2 23.52 23.71 23.77 T:isapa128av20 27.58 27.66 27.70 T:grain128aeadv2 36.27 36.33 36.43 romulusn 39.76 39.78 39.83 T:giftcofb128v1 40.04 40.17 40.40 T:isapk128av20 41.50 41.59 41.62 romulust 49.83 49.95 50.14 T:isapk128v20 51.89 51.91 51.95 T:tinyjambu128v2 59.62 59.66 59.72 T:tinyjambu192v2 59.61 59.68 59.74 romulusm 62.68 62.74 62.80 T:tinyjambu256v2 92.53 92.94 93.24 T:isapxv20 184.78 184.87 185.04 T:elephant200v2 6427.79 6432.45 6435.25 T:elephant176v2 7525.61 7546.42 7548.82 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.84 0.86 0.87 T:aes128gcmv1 0.92 0.94 0.95 aes256gcmv1 6.14 6.17 6.19 ascon128av12 9.15 9.18 9.20 ascon80pqv12 9.18 9.19 9.22 ascon128v12 10.80 10.88 10.99 T:xoodyakround3 11.18 11.21 11.23 ascon128abi32v12 15.63 15.76 15.77 T:schwaemm256128v2 16.30 16.33 16.43 ascon128bi32v12 20.57 20.69 20.77 T:schwaemm192192v2 21.87 21.98 22.46 T:schwaemm256256v2 22.55 22.58 22.59 T:schwaemm128128v2 27.10 27.12 27.17 T:grain128aeadv2 27.68 27.71 27.76 T:isapa128v20 29.29 29.42 29.44 T:isapa128av20 29.75 29.77 29.79 romulusn 39.59 39.62 39.64 T:giftcofb128v1 41.36 41.40 41.43 romulusm 42.42 42.46 42.53 T:tinyjambu128v2 46.41 46.43 46.47 T:tinyjambu192v2 47.20 47.23 47.27 T:tinyjambu256v2 49.82 50.03 50.13 T:isapk128av20 64.74 64.87 65.15 T:isapk128v20 81.43 81.47 81.55 romulust 125.47 126.20 126.56 T:isapxv20 139.12 139.23 139.29 T:elephant200v2 4802.73 4820.90 4823.87 T:elephant176v2 5681.31 5682.14 5684.22 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.84 0.86 0.87 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.21 6.23 6.25 ascon128av12 9.14 9.17 9.18 ascon128v12 9.15 9.20 9.22 ascon80pqv12 10.82 10.89 10.94 T:xoodyakround3 11.12 11.14 11.16 ascon128abi32v12 15.75 15.76 15.78 T:schwaemm256128v2 16.35 16.38 16.40 ascon128bi32v12 20.51 20.55 20.64 T:schwaemm192192v2 21.92 21.99 22.45 T:schwaemm256256v2 22.54 22.57 22.60 T:schwaemm128128v2 27.32 27.39 27.43 T:grain128aeadv2 27.65 27.69 27.73 T:isapa128v20 29.24 29.29 29.42 T:isapa128av20 29.76 29.81 29.86 romulusn 39.67 39.69 39.72 T:giftcofb128v1 41.41 41.46 41.50 romulusm 42.42 42.51 42.60 T:tinyjambu128v2 46.42 46.45 46.48 T:tinyjambu192v2 47.11 47.14 47.16 T:tinyjambu256v2 49.79 49.99 50.09 T:isapk128av20 64.74 64.87 65.01 T:isapk128v20 81.41 81.46 81.51 romulust 125.28 125.75 126.45 T:isapxv20 138.92 139.11 139.17 T:elephant200v2 4803.80 4821.09 4823.59 T:elephant176v2 5681.83 5683.78 5684.26 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.85 0.86 0.86 T:aes128gcmv1 0.93 0.93 0.93 aes256gcmv1 6.22 6.23 6.25 ascon128av12 9.15 9.15 9.17 ascon128v12 9.18 9.21 9.24 ascon80pqv12 10.85 10.88 10.92 T:xoodyakround3 11.13 11.14 11.16 ascon128abi32v12 15.74 15.77 15.78 T:schwaemm256128v2 16.36 16.38 16.39 ascon128bi32v12 18.53 18.56 18.59 T:isapa128v20 20.53 20.57 20.71 T:schwaemm192192v2 21.89 21.97 22.40 T:schwaemm256256v2 22.56 22.57 22.61 T:schwaemm128128v2 23.52 23.58 23.69 T:isapa128av20 27.34 27.38 27.43 T:grain128aeadv2 29.74 29.82 29.85 romulusn 39.67 39.69 39.72 T:giftcofb128v1 39.93 40.01 40.24 T:isapk128av20 41.43 41.45 41.47 romulusm 41.53 41.57 41.61 romulust 42.38 42.42 42.52 T:tinyjambu128v2 46.44 46.46 46.48 T:tinyjambu192v2 47.13 47.15 47.17 T:tinyjambu256v2 49.86 49.99 50.19 T:isapk128v20 92.91 93.01 93.16 T:isapxv20 138.94 139.08 139.25 T:elephant200v2 4802.03 4821.07 4823.48 T:elephant176v2 5680.80 5682.76 5684.92 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.44 0.46 0.47 T:aes128gcmv1 0.45 0.47 0.48 aes256gcmv1 6.08 6.10 6.12 ascon128av12 7.53 7.55 7.60 T:xoodyakround3 9.13 9.14 9.17 ascon80pqv12 9.12 9.15 9.17 ascon128v12 10.92 10.94 10.95 ascon128abi32v12 15.55 15.59 15.91 T:schwaemm256128v2 16.29 16.51 16.54 ascon128bi32v12 18.51 18.57 18.60 T:isapa128v20 20.57 20.61 20.96 T:schwaemm192192v2 21.86 21.95 22.40 T:schwaemm256256v2 22.48 22.51 22.55 T:schwaemm128128v2 23.23 23.26 23.30 romulusn 23.24 23.27 23.28 romulusm 23.52 23.63 23.65 T:isapa128av20 27.12 27.14 27.18 T:grain128aeadv2 31.60 31.65 32.48 T:tinyjambu256v2 32.87 33.12 33.36 T:tinyjambu128v2 33.20 33.23 33.24 T:tinyjambu192v2 39.51 39.60 39.63 T:giftcofb128v1 39.84 39.98 40.13 T:isapk128av20 41.53 41.55 41.59 romulust 49.82 50.01 50.25 T:isapk128v20 91.91 92.73 93.17 T:isapxv20 93.03 93.07 93.21 T:elephant200v2 3175.35 3194.18 3196.58 T:elephant176v2 3770.58 3772.28 3777.19 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.45 0.47 0.47 T:aes128gcmv1 0.46 0.47 0.48 aes256gcmv1 6.22 6.23 6.25 ascon128av12 7.52 7.55 7.62 T:xoodyakround3 9.13 9.15 9.16 ascon80pqv12 9.13 9.15 9.18 ascon128v12 10.89 10.91 10.94 ascon128abi32v12 15.56 15.60 15.68 T:schwaemm256128v2 16.34 16.37 16.40 ascon128bi32v12 18.54 18.59 18.62 T:isapa128v20 20.46 20.70 20.95 T:schwaemm192192v2 21.85 21.93 22.39 T:schwaemm256256v2 22.48 22.51 22.57 T:schwaemm128128v2 23.22 23.24 23.27 romulusm 23.22 23.24 23.27 romulusn 23.42 23.57 23.77 T:isapa128av20 27.12 27.18 27.23 T:grain128aeadv2 31.43 31.52 31.54 T:tinyjambu256v2 32.88 33.22 33.34 T:tinyjambu128v2 33.22 33.23 33.25 T:tinyjambu192v2 39.50 39.61 39.64 T:giftcofb128v1 39.81 39.97 40.09 T:isapk128av20 41.51 41.56 41.59 romulust 49.67 49.90 50.12 T:isapk128v20 92.03 92.22 92.59 T:isapxv20 93.00 93.07 93.20 T:elephant200v2 3175.37 3194.23 3195.07 T:elephant176v2 3771.10 3772.31 3777.81 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.46 0.46 0.47 T:aes128gcmv1 0.46 0.46 0.47 aes256gcmv1 6.22 6.24 6.26 ascon128av12 7.52 7.57 7.61 T:xoodyakround3 9.11 9.15 9.17 ascon128v12 9.14 9.15 9.17 ascon80pqv12 10.90 10.92 10.94 ascon128abi32v12 15.56 15.59 15.67 T:schwaemm256128v2 16.35 16.36 16.39 ascon128bi32v12 18.54 18.58 18.62 T:isapa128v20 20.46 20.61 20.93 T:schwaemm192192v2 21.84 21.93 22.37 T:schwaemm256256v2 22.49 22.52 22.55 T:schwaemm128128v2 23.21 23.25 23.28 romulusm 23.24 23.26 23.27 romulusn 23.44 23.67 23.79 T:isapa128av20 27.16 27.19 27.27 T:grain128aeadv2 31.43 31.49 31.56 T:tinyjambu256v2 33.10 33.19 33.34 T:tinyjambu128v2 33.21 33.23 33.25 T:tinyjambu192v2 39.48 39.59 39.62 T:giftcofb128v1 39.90 39.99 40.08 T:isapk128av20 41.52 41.59 41.64 romulust 49.64 49.96 50.14 T:isapk128v20 92.04 92.49 93.06 T:isapxv20 93.00 93.05 93.24 T:elephant200v2 3175.40 3194.33 3196.93 T:elephant176v2 3771.63 3773.46 3777.80 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.31 6.31 6.35 ascon128av12 9.33 9.34 9.36 ascon80pqv12 9.33 9.35 9.35 ascon128v12 10.95 11.00 11.07 T:xoodyakround3 11.46 11.47 11.49 ascon128abi32v12 16.23 16.25 16.46 T:schwaemm256128v2 16.64 16.66 16.75 ascon128bi32v12 21.15 21.24 21.27 T:schwaemm192192v2 22.56 22.60 23.00 T:schwaemm256256v2 22.86 22.88 22.89 T:schwaemm128128v2 27.41 27.44 27.46 T:grain128aeadv2 30.13 30.15 30.17 romulusn 31.71 31.75 31.80 T:isapa128av20 39.95 39.97 39.99 T:giftcofb128v1 40.45 40.48 40.59 T:isapa128v20 41.72 41.75 41.77 romulusm 42.64 42.72 42.84 T:tinyjambu128v2 46.76 46.79 46.81 T:tinyjambu192v2 47.59 47.61 47.66 T:tinyjambu256v2 57.91 58.02 58.10 T:isapk128av20 82.65 82.67 82.72 romulust 114.09 114.42 114.91 T:isapk128v20 142.01 142.14 142.20 T:elephant200v2 202.37 202.93 203.39 T:isapxv20 4831.35 4865.64 4867.78 T:elephant176v2 5720.91 5722.00 5739.91 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.95 0.95 0.95 T:aes128gcmv1 1.03 1.04 1.05 aes256gcmv1 6.39 6.40 6.41 ascon128av12 9.29 9.30 9.32 ascon128v12 9.31 9.34 9.36 ascon80pqv12 10.98 11.02 11.07 T:xoodyakround3 11.40 11.40 11.44 ascon128abi32v12 16.25 16.26 16.45 T:schwaemm256128v2 16.69 16.70 16.72 ascon128bi32v12 21.06 21.24 21.32 T:schwaemm192192v2 22.53 22.56 22.97 T:schwaemm256256v2 22.87 22.88 22.89 T:schwaemm128128v2 27.70 27.74 27.77 T:grain128aeadv2 30.13 30.14 30.19 romulusn 31.61 31.71 31.80 T:isapa128av20 40.03 40.06 40.07 T:giftcofb128v1 40.46 40.47 40.51 T:isapa128v20 41.89 41.93 41.96 romulusm 42.76 42.83 42.90 T:tinyjambu128v2 46.79 46.81 46.83 T:tinyjambu192v2 47.48 47.50 47.53 T:tinyjambu256v2 57.89 57.99 58.08 T:isapk128av20 82.64 82.66 82.69 romulust 114.10 114.30 114.48 T:isapk128v20 141.98 142.00 142.05 T:elephant200v2 202.70 203.07 203.65 T:isapxv20 4831.20 4865.38 4867.05 T:elephant176v2 5720.49 5721.72 5739.45 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.94 0.95 0.95 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.37 6.38 6.39 ascon128av12 9.29 9.30 9.32 ascon128v12 9.31 9.35 9.37 ascon80pqv12 11.02 11.04 11.11 T:xoodyakround3 11.40 11.40 11.41 ascon128abi32v12 16.17 16.25 16.46 T:schwaemm256128v2 16.68 16.69 16.71 ascon128bi32v12 21.14 21.20 21.23 T:schwaemm192192v2 22.53 22.59 22.98 T:schwaemm256256v2 22.85 22.86 22.90 T:schwaemm128128v2 24.92 25.00 25.03 T:isapa128av20 25.03 25.04 25.10 T:isapa128v20 27.71 27.72 27.76 T:grain128aeadv2 29.99 30.11 30.16 romulusn 40.05 40.06 40.08 T:giftcofb128v1 41.90 41.93 41.94 romulusm 42.73 42.75 42.76 romulust 42.80 42.85 42.88 T:tinyjambu128v2 45.18 45.27 45.33 T:isapk128av20 46.79 46.80 46.83 T:tinyjambu192v2 47.46 47.48 47.53 T:tinyjambu256v2 76.19 76.24 76.34 T:isapk128v20 132.34 132.47 132.72 T:isapxv20 141.84 141.93 142.02 T:elephant200v2 4831.16 4865.04 4867.17 T:elephant176v2 5720.78 5721.72 5738.59 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.63 4.74 4.79 T:aes128gcmv1 5.18 5.22 5.40 aes256gcmv1 9.64 9.79 10.27 ascon128av12 12.31 12.38 12.81 ascon128v12 12.42 12.78 12.98 ascon80pqv12 16.02 16.18 16.48 T:xoodyakround3 17.29 17.40 18.16 ascon128abi32v12 23.89 23.98 24.43 ascon128bi32v12 26.59 27.09 27.33 T:schwaemm256128v2 29.21 29.44 29.88 T:schwaemm128128v2 34.26 34.86 35.34 T:schwaemm192192v2 35.28 35.47 35.90 T:grain128aeadv2 35.91 36.18 37.05 T:schwaemm256256v2 38.12 38.16 38.34 romulusn 47.66 47.81 48.06 T:giftcofb128v1 48.77 48.98 49.27 T:tinyjambu128v2 50.31 50.39 50.99 romulusm 54.67 54.80 55.03 T:tinyjambu192v2 55.73 55.87 56.12 T:tinyjambu256v2 85.23 85.68 85.97 T:isapa128av20 110.33 110.60 110.96 romulust 200.82 201.02 201.52 T:elephant200v2 228.39 228.88 231.16 T:isapk128av20 333.81 333.96 334.40 T:isapa128v20 1232.76 1234.14 1237.73 T:isapk128v20 1953.96 1958.45 1964.13 T:isapxv20 6022.53 6052.48 6057.18 T:elephant176v2 7653.42 7655.47 7685.05 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.54 4.59 4.65 T:aes128gcmv1 5.02 5.08 5.25 aes256gcmv1 9.63 9.80 10.34 ascon128av12 12.30 12.44 12.81 ascon128v12 12.43 12.64 13.18 ascon80pqv12 16.08 16.45 17.05 T:xoodyakround3 17.29 17.60 18.15 ascon128abi32v12 23.90 23.95 24.12 ascon128bi32v12 26.57 26.70 27.16 T:schwaemm256128v2 29.21 29.42 29.61 T:schwaemm128128v2 34.33 34.63 35.09 T:schwaemm192192v2 35.19 35.41 36.12 T:grain128aeadv2 35.93 36.03 37.12 T:schwaemm256256v2 38.11 38.30 38.42 romulusn 48.22 48.30 48.52 T:giftcofb128v1 48.91 49.09 49.45 T:tinyjambu128v2 52.76 52.84 52.93 romulusm 54.78 54.86 55.09 T:tinyjambu192v2 55.34 55.52 55.70 T:tinyjambu256v2 85.31 85.60 85.69 T:isapa128av20 110.40 110.62 110.72 romulust 200.56 200.71 200.97 T:elephant200v2 228.58 229.02 232.20 T:isapk128av20 334.18 334.52 334.87 T:isapa128v20 1231.50 1233.23 1236.62 T:isapk128v20 1962.88 1964.34 1975.05 T:isapxv20 6049.10 6052.19 6056.20 T:elephant176v2 7653.21 7654.95 7687.91 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.52 4.57 4.61 T:aes128gcmv1 4.98 5.02 5.05 aes256gcmv1 9.70 9.73 9.80 ascon128av12 12.34 12.38 12.46 ascon128v12 12.38 12.50 12.78 ascon80pqv12 16.00 16.43 16.52 T:xoodyakround3 17.26 17.34 17.50 ascon128abi32v12 23.80 23.90 23.98 ascon128bi32v12 26.55 26.62 26.70 T:schwaemm256128v2 29.22 29.37 29.55 T:schwaemm128128v2 34.27 34.57 34.88 T:schwaemm192192v2 35.12 35.29 35.41 T:grain128aeadv2 35.97 36.30 37.06 T:schwaemm256256v2 38.25 38.30 38.45 romulusn 48.12 48.16 48.39 T:giftcofb128v1 48.81 48.96 49.05 T:tinyjambu128v2 52.63 52.69 52.87 romulusm 54.65 54.78 54.91 T:tinyjambu192v2 54.79 55.14 55.58 T:isapa128av20 55.18 55.33 55.50 T:tinyjambu256v2 69.42 69.68 70.17 romulust 153.21 156.00 157.53 T:isapk128av20 174.16 174.42 175.00 T:isapa128v20 200.64 200.82 200.98 T:elephant200v2 668.01 670.39 672.07 T:isapk128v20 1025.33 1027.10 1028.16 T:isapxv20 6050.45 6052.07 6056.80 T:elephant176v2 7653.80 7655.27 7659.11 T:elephant160v2