VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.41 1.41 T:aes128gcmv1 1.64 1.64 1.65 aes256gcmv1 7.40 7.44 7.46 ascon128av12 10.81 11.02 11.09 ascon128v12 10.97 11.04 11.08 ascon80pqv12 14.05 14.09 14.12 ascon128abi32v12 15.82 15.86 15.99 T:xoodyakround3 17.87 17.95 18.02 T:schwaemm256128v2 20.62 21.12 21.14 ascon128bi32v12 22.75 22.85 23.63 T:schwaemm256256v2 23.41 23.48 23.60 T:schwaemm192192v2 24.96 25.04 25.07 T:grain128aeadv2 25.66 25.77 25.83 T:schwaemm128128v2 39.55 39.59 39.64 romulusn 40.36 40.51 40.56 T:isapa128av20 41.42 41.48 41.52 T:giftcofb128v1 41.61 41.97 42.03 T:isapa128v20 60.49 60.62 60.82 T:tinyjambu128v2 61.98 62.06 62.79 romulusm 69.44 69.63 69.90 T:isapk128av20 76.56 76.57 76.58 T:tinyjambu192v2 79.97 80.04 80.13 T:tinyjambu256v2 92.35 92.73 93.15 T:isapk128v20 125.01 125.14 125.67 romulust 177.06 177.19 177.36 T:elephant200v2 194.46? 196.13? 218.95? T:isapxv20 7523.07 7524.33 7525.20 T:elephant176v2 8225.20 8226.00 8226.55 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.44 1.45 1.47 T:aes128gcmv1 1.57 1.58 1.60 aes256gcmv1 7.33 7.46 7.48 ascon128av12 10.87 10.91 10.97 ascon80pqv12 10.92 10.97 11.00 ascon128v12 14.10 14.12 14.16 ascon128abi32v12 15.43 15.50 15.56 T:xoodyakround3 17.84 17.90 17.97 T:schwaemm256128v2 20.71 20.75 20.78 ascon128bi32v12 22.77 22.84 23.55 T:schwaemm256256v2 23.44 23.60 23.67 T:schwaemm192192v2 25.38 25.40 25.42 T:grain128aeadv2 25.69 25.77 25.81 T:schwaemm128128v2 39.31 39.34 39.36 romulusn 40.42 40.53 40.60 T:isapa128av20 41.49 41.52 41.57 T:giftcofb128v1 41.75 41.97 42.09 T:isapa128v20 60.47 60.72 60.92 T:tinyjambu128v2 61.98 62.04 62.48 romulusm 69.53 69.72 69.98 T:isapk128av20 76.54 76.55 76.57 T:tinyjambu192v2 80.01 80.18 80.21 T:tinyjambu256v2 92.21 92.64 93.00 T:isapk128v20 125.11 125.23 125.61 romulust 177.07 177.19 177.32 T:elephant200v2 195.79 196.31 197.95 T:isapxv20 7523.68 7524.33 7524.94 T:elephant176v2 8224.92 8225.90 8226.47 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.44 1.45 1.46 T:aes128gcmv1 1.58 1.58 1.59 aes256gcmv1 7.34 7.43 7.47 ascon128av12 10.90 10.91 10.95 ascon80pqv12 10.94 10.97 11.00 ascon128v12 14.08 14.12 14.15 ascon128abi32v12 15.53 15.58 15.62 T:xoodyakround3 17.82 17.86 17.94 T:schwaemm256128v2 20.43 20.51 20.57 T:isapa128v20 20.70 20.74 21.14 ascon128bi32v12 22.77 22.84 23.56 T:schwaemm256256v2 23.44 23.57 23.63 T:schwaemm192192v2 25.37 25.38 25.40 T:grain128aeadv2 25.65 25.72 25.79 T:schwaemm128128v2 27.26 27.29 27.42 T:isapa128av20 39.32 39.36 39.42 romulusn 41.51 41.55 41.59 T:giftcofb128v1 42.76 42.88 43.03 romulust 46.12 46.38 46.49 T:isapk128av20 57.58 57.80 58.16 T:isapk128v20 60.50 60.90 61.04 T:tinyjambu128v2 61.95 62.03 62.52 romulusm 76.54 76.55 76.57 T:tinyjambu192v2 80.05 80.14 80.35 T:tinyjambu256v2 112.83 113.04 114.95 T:isapxv20 177.13 177.24 177.42 T:elephant200v2 7523.53 7524.24 7524.65 T:elephant176v2 8224.98 8225.71 8226.78 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.89 0.90 0.91 T:aes128gcmv1 1.01 1.02 1.02 aes256gcmv1 7.42 7.44 7.47 ascon128av12 10.83 10.86 10.88 ascon128v12 10.91 10.93 10.97 ascon80pqv12 11.88 11.95 11.97 T:xoodyakround3 13.93 13.97 14.00 ascon128abi32v12 17.70 17.77 17.80 T:schwaemm256128v2 20.55 20.80 20.84 ascon128bi32v12 22.67 22.73 23.58 T:schwaemm256256v2 23.32 23.39 23.43 T:schwaemm192192v2 24.88 24.98 25.00 T:grain128aeadv2 25.58 25.61 25.66 T:schwaemm128128v2 30.99 31.04 31.14 T:isapa128v20 31.54 31.61 31.65 romulusn 33.89 33.92 33.99 T:isapa128av20 41.41 41.43 41.46 T:giftcofb128v1 42.76 42.81 43.58 romulusm 49.50 49.73 49.80 T:tinyjambu128v2 57.94 58.00 58.11 T:isapk128av20 59.60 59.61 59.61 T:tinyjambu192v2 60.55 60.58 60.65 T:tinyjambu256v2 75.32 75.55 75.85 T:isapk128v20 83.70 83.75 84.16 romulust 132.92 133.01 133.11 T:elephant200v2 154.22 155.13 166.46 T:isapxv20 5618.69 5619.25 5619.75 T:elephant176v2 6168.32 6168.83 6169.33 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.91 0.92 0.93 T:aes128gcmv1 0.97 0.99 1.00 aes256gcmv1 7.23 7.26 7.40 ascon128av12 10.84 10.89 10.92 ascon80pqv12 10.88 10.93 10.98 ascon128v12 11.71 11.73 11.76 T:xoodyakround3 13.95 13.97 14.00 ascon128abi32v12 17.69 17.74 17.80 T:schwaemm256128v2 20.81 20.86 21.06 ascon128bi32v12 22.67 22.74 23.55 T:schwaemm256256v2 23.35 23.39 23.44 T:schwaemm192192v2 25.08 25.10 25.16 T:grain128aeadv2 25.56 25.62 25.66 T:schwaemm128128v2 30.91 31.05 31.16 T:isapa128v20 31.40 31.49 31.55 romulusn 33.83 33.89 33.98 T:isapa128av20 41.45 41.48 41.51 T:giftcofb128v1 42.79 42.84 43.32 romulusm 49.65 49.76 49.80 T:tinyjambu128v2 57.94 58.03 58.13 T:isapk128av20 59.58 59.60 59.64 T:tinyjambu192v2 60.61 60.65 60.69 T:tinyjambu256v2 75.36 75.51 75.68 T:isapk128v20 83.71 83.80 84.18 romulust 132.95 133.03 133.09 T:elephant200v2 154.86 155.21 155.92 T:isapxv20 5618.69 5619.35 5620.04 T:elephant176v2 6168.37 6168.82 6169.16 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.92 0.92 0.93 T:aes128gcmv1 0.99 0.99 0.99 aes256gcmv1 7.25 7.27 7.27 ascon128av12 10.87 10.89 10.91 ascon80pqv12 10.91 10.95 10.96 ascon128v12 11.71 11.72 11.76 T:xoodyakround3 13.94 13.97 13.99 ascon128abi32v12 17.69 17.75 17.78 T:schwaemm256128v2 20.27 20.33 20.40 T:isapa128v20 20.79 20.83 21.07 ascon128bi32v12 22.66 22.74 23.56 T:schwaemm256256v2 23.38 23.42 23.48 T:schwaemm192192v2 25.08 25.13 25.16 T:grain128aeadv2 25.58 25.62 25.67 T:schwaemm128128v2 27.24 27.26 27.34 T:isapa128av20 31.47 31.51 31.54 romulusn 41.43 41.47 41.52 T:giftcofb128v1 42.59 42.66 42.79 romulust 42.79 42.84 43.30 romulusm 46.22 46.34 46.46 T:isapk128av20 49.66 49.71 49.80 T:tinyjambu128v2 57.99 58.19 58.32 T:isapk128v20 59.59 59.61 59.63 T:tinyjambu192v2 60.64 60.65 60.69 T:tinyjambu256v2 113.41 113.60 114.48 T:isapxv20 132.97 133.05 133.12 T:elephant200v2 5618.60 5619.47 5619.90 T:elephant176v2 6168.35 6168.73 6169.08 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.38 0.39 0.40 aes256gcmv1 0.39 0.40 0.40 T:aes128gcmv1 7.41 7.43 7.45 ascon128av12 7.91 7.95 7.99 T:xoodyakround3 10.88 10.90 10.95 ascon80pqv12 10.85 10.91 10.94 ascon128v12 13.79 13.82 13.85 ascon128abi32v12 17.55 17.60 17.66 T:schwaemm256128v2 20.01 20.07 20.16 T:isapa128v20 20.45 20.49 20.52 ascon128bi32v12 22.54 22.63 23.48 T:schwaemm256256v2 23.13 23.19 23.28 T:schwaemm192192v2 23.52 23.59 24.36 romulusm 23.61 23.77 23.81 romulusn 24.83 24.89 24.92 T:grain128aeadv2 25.37 25.44 25.52 T:schwaemm128128v2 27.26 27.32 27.40 T:isapa128av20 38.54 38.60 38.63 T:tinyjambu128v2 41.10 41.13 41.17 T:tinyjambu256v2 41.34 41.37 41.41 T:giftcofb128v1 42.35 42.42 42.58 romulust 42.64 42.65 42.66 T:tinyjambu192v2 45.99 46.24 46.35 T:isapk128av20 57.95 58.25 58.48 T:isapk128v20 90.39 90.51 90.58 T:elephant200v2 113.84 113.97 114.24 T:isapxv20 3715.88 3716.29 3716.89 T:elephant176v2 4112.27 4112.57 4113.01 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.38 0.40 0.40 aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 7.03 7.07 7.13 ascon128av12 7.90 7.96 7.98 T:xoodyakround3 10.78 10.81 10.86 ascon80pqv12 10.85 10.90 10.92 ascon128v12 13.79 13.82 13.85 ascon128abi32v12 17.49 17.53 17.59 T:schwaemm256128v2 19.97 20.07 20.18 T:isapa128v20 20.95 20.97 20.99 ascon128bi32v12 22.53 22.63 23.48 T:schwaemm256256v2 23.12 23.19 23.31 T:schwaemm192192v2 23.52 23.58 24.04 romulusm 23.72 23.78 23.80 romulusn 24.79 24.82 24.91 T:grain128aeadv2 25.39 25.46 25.54 T:schwaemm128128v2 27.26 27.31 27.41 T:isapa128av20 38.51 38.57 38.62 T:tinyjambu128v2 41.11 41.12 41.17 T:tinyjambu256v2 41.34 41.38 41.44 T:giftcofb128v1 42.35 42.42 42.59 romulust 42.62 42.64 42.68 T:tinyjambu192v2 46.07 46.20 46.29 T:isapk128av20 57.96 58.37 58.58 T:isapk128v20 89.52 90.47 90.53 T:elephant200v2 113.84 113.97 114.28 T:isapxv20 3715.85 3716.11 3716.59 T:elephant176v2 4111.97 4112.75 4113.14 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.39 0.40 0.40 aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 7.03 7.06 7.07 ascon128av12 7.91 7.94 7.98 T:xoodyakround3 10.77 10.81 10.83 ascon80pqv12 10.85 10.88 10.90 ascon128v12 13.79 13.82 13.84 ascon128abi32v12 17.55 17.61 17.65 T:schwaemm256128v2 20.00 20.12 20.23 T:isapa128v20 20.96 20.98 21.00 ascon128bi32v12 22.55 22.65 23.49 T:schwaemm256256v2 23.10 23.20 23.27 T:schwaemm192192v2 23.50 23.55 24.07 romulusm 23.71 23.77 23.79 romulusn 24.80 24.82 24.93 T:grain128aeadv2 25.41 25.46 25.50 T:schwaemm128128v2 27.27 27.32 27.43 T:isapa128av20 38.55 38.58 38.64 T:tinyjambu128v2 41.09 41.12 41.16 T:tinyjambu256v2 41.34 41.39 41.43 T:giftcofb128v1 42.35 42.40 42.59 romulust 42.62 42.63 42.71 T:tinyjambu192v2 46.09 46.22 46.31 T:isapk128av20 57.84 58.13 58.40 T:isapk128v20 90.43 90.56 90.61 T:elephant200v2 113.84 113.97 114.30 T:isapxv20 3715.78 3715.97 3716.72 T:elephant176v2 4112.46 4112.77 4113.10 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.06 1.06 1.06 T:aes128gcmv1 1.19 1.19 1.20 aes256gcmv1 7.61 7.64 7.65 ascon128av12 11.02 11.04 11.07 ascon128v12 11.11 11.13 11.15 ascon80pqv12 11.99 12.05 12.09 T:xoodyakround3 14.23 14.27 14.31 ascon128abi32v12 18.27 18.30 18.36 T:schwaemm256128v2 21.10 21.12 21.14 ascon128bi32v12 23.33 23.37 24.14 T:schwaemm256256v2 23.88 23.90 23.95 T:schwaemm192192v2 25.27 25.38 25.40 T:grain128aeadv2 25.95 25.97 26.02 T:schwaemm128128v2 31.91 31.93 32.00 romulusn 36.33 36.37 36.43 T:isapa128av20 41.79 41.81 41.85 T:giftcofb128v1 43.15 43.20 43.89 romulusm 45.63 45.76 45.80 T:isapa128v20 49.92 50.00 50.13 T:tinyjambu128v2 60.04 60.04 60.05 T:tinyjambu192v2 61.09 61.12 61.15 T:tinyjambu256v2 65.01 65.08 65.23 T:isapk128av20 85.04 85.13 85.43 romulust 130.88 131.12 131.30 T:isapk128v20 135.82 135.86 135.98 T:elephant200v2 250.38 250.64 261.14 T:isapxv20 5661.16 5662.29 5662.64 T:elephant176v2 6237.84 6238.02 6238.38 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.08 1.08 1.08 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 7.44 7.46 7.49 ascon128av12 11.04 11.07 11.10 ascon80pqv12 11.09 11.13 11.15 ascon128v12 11.86 11.87 11.89 T:xoodyakround3 14.27 14.28 14.30 ascon128abi32v12 18.28 18.31 18.34 T:schwaemm256128v2 21.17 21.27 21.34 ascon128bi32v12 23.35 23.37 24.12 T:schwaemm256256v2 23.89 23.93 23.95 T:schwaemm192192v2 25.49 25.52 25.57 T:grain128aeadv2 25.94 26.00 26.01 T:schwaemm128128v2 31.84 31.87 31.88 romulusn 36.31 36.36 36.39 T:isapa128av20 41.85 41.90 41.92 T:giftcofb128v1 43.23 43.27 43.68 romulusm 45.66 45.73 45.78 T:isapa128v20 50.01 50.13 50.17 T:tinyjambu128v2 60.01 60.05 60.08 T:tinyjambu192v2 61.08 61.10 61.16 T:tinyjambu256v2 65.03 65.09 65.17 T:isapk128av20 85.04 85.10 85.36 romulust 130.89 131.16 131.26 T:isapk128v20 135.81 135.93 136.02 T:elephant200v2 250.36 250.62 251.23 T:isapxv20 5661.34 5662.01 5662.32 T:elephant176v2 6237.58 6238.01 6238.18 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.08 1.08 1.08 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 7.44 7.46 7.65 ascon128av12 11.04 11.06 11.09 ascon80pqv12 11.11 11.14 11.16 ascon128v12 11.89 11.90 11.91 T:xoodyakround3 14.26 14.28 14.30 ascon128abi32v12 18.28 18.30 18.36 T:schwaemm256128v2 21.13 21.20 21.34 ascon128bi32v12 23.34 23.36 24.10 T:schwaemm256256v2 23.92 23.96 23.99 T:schwaemm192192v2 25.49 25.52 25.56 T:grain128aeadv2 25.91 25.94 26.01 T:schwaemm128128v2 27.90 27.96 28.02 T:isapa128v20 28.67 28.69 28.74 T:isapa128av20 31.78 31.81 31.84 romulusn 41.85 41.87 41.89 T:giftcofb128v1 43.21 43.25 43.69 romulusm 43.86 43.91 44.03 romulust 50.08 50.16 50.19 T:tinyjambu128v2 50.43 50.51 50.57 T:isapk128av20 60.02 60.03 60.05 T:tinyjambu192v2 61.08 61.16 61.18 T:tinyjambu256v2 86.65 86.75 86.92 T:isapk128v20 135.81 135.86 135.90 T:elephant200v2 162.26 162.42 163.19 T:isapxv20 5661.75 5662.09 5662.52 T:elephant176v2 6237.75 6237.87 6238.21 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.62 6.64 6.68 T:aes128gcmv1 7.40 7.43 7.47 aes256gcmv1 11.84 12.05 12.66 ascon128av12 15.05 15.34 15.58 ascon128v12 15.22 15.52 15.84 ascon80pqv12 17.58 17.69 17.88 T:xoodyakround3 21.24 21.42 21.74 ascon128abi32v12 27.74 27.97 28.20 ascon128bi32v12 29.98 30.23 30.41 T:schwaemm256128v2 33.29 33.55 33.74 T:schwaemm128128v2 34.48 34.59 34.71 T:grain128aeadv2 37.30 37.69 37.98 T:schwaemm256256v2 38.28 38.39 38.50 romulusn 38.76 39.01 40.00 T:schwaemm192192v2 50.67 50.82 51.25 T:giftcofb128v1 51.09 51.59 51.92 romulusm 58.63 58.98 59.33 T:tinyjambu128v2 70.09 70.12 70.16 T:tinyjambu192v2 71.83 71.97 72.31 T:tinyjambu256v2 93.58 93.76 94.07 T:isapa128av20 114.51 114.90 115.55 romulust 192.55 193.09 193.44 T:elephant200v2 210.33 210.77 212.97 T:isapk128av20 381.43 382.38 383.20 T:isapa128v20 1385.67 1386.55 1388.22 T:isapk128v20 2417.64 2419.10 2426.96 T:isapxv20 7049.39 7051.15 7053.60 T:elephant176v2 8355.69 8356.98 8358.12 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.34 6.39 6.46 T:aes128gcmv1 7.04 7.08 7.10 aes256gcmv1 12.05 12.30 12.70 ascon128av12 15.13 15.37 15.73 ascon80pqv12 15.09 15.42 15.72 ascon128v12 17.55 17.68 18.06 T:xoodyakround3 21.24 21.51 21.93 ascon128abi32v12 28.05 28.19 28.54 ascon128bi32v12 29.80 30.10 30.38 T:schwaemm256128v2 33.22 33.72 33.92 T:schwaemm128128v2 34.77 34.81 34.95 T:grain128aeadv2 37.32 37.50 38.11 T:schwaemm256256v2 38.36 38.47 38.55 romulusn 38.42 38.84 39.11 T:schwaemm192192v2 50.99 51.18 51.30 T:giftcofb128v1 53.20 53.47 53.84 romulusm 59.11 59.16 59.57 T:tinyjambu128v2 70.16 70.20 70.28 T:tinyjambu192v2 71.82 71.95 72.20 T:tinyjambu256v2 93.34 93.48 93.62 T:isapa128av20 114.34 115.00 115.32 romulust 192.72 192.90 193.14 T:elephant200v2 210.49 211.38 212.68 T:isapk128av20 382.25 382.70 383.12 T:isapa128v20 1385.98 1386.69 1389.29 T:isapk128v20 2415.87 2417.15 2418.76 T:isapxv20 7050.93 7052.87 7054.03 T:elephant176v2 8355.01 8356.06 8358.71 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.35 6.38 6.41 T:aes128gcmv1 7.09 7.12 7.16 aes256gcmv1 11.79 11.91 12.02 ascon128av12 15.05 15.20 15.38 ascon80pqv12 15.15 15.34 15.50 ascon128v12 17.48 17.56 17.83 T:xoodyakround3 21.33 21.44 21.58 ascon128abi32v12 27.70 27.93 28.19 ascon128bi32v12 29.57 29.83 30.15 T:schwaemm256128v2 33.44 33.64 33.75 T:schwaemm128128v2 34.75 34.80 34.86 T:grain128aeadv2 37.34 37.56 38.05 T:schwaemm256256v2 38.35 38.42 38.52 romulusn 38.41 38.71 38.89 T:schwaemm192192v2 51.09 51.26 51.43 T:giftcofb128v1 53.13 53.29 53.71 romulusm 58.94 59.07 59.28 T:tinyjambu128v2 60.29 60.59 60.91 T:isapa128av20 70.13 70.16 70.20 T:tinyjambu192v2 71.69 71.85 72.12 T:tinyjambu256v2 71.80 71.95 72.11 romulust 132.05 132.73 133.84 T:isapk128av20 192.80 193.04 194.25 T:elephant200v2 201.37 201.61 201.99 T:isapa128v20 725.47 726.60 728.38 T:isapk128v20 1263.45 1264.52 1265.67 T:isapxv20 7049.83 7051.52 7052.91 T:elephant176v2 8355.47 8358.44 8370.02 T:elephant160v2