VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.54 1.55 1.55 T:aes128gcmv1 1.66 1.68 1.69 aes256gcmv1 6.67 6.76 6.78 ascon128av12 9.33 9.34 9.43 ascon128v12 9.37 9.38 9.39 ascon80pqv12 11.42 11.44 11.45 ascon128abi32v12 17.22 17.23 17.23 ascon128bi32v12 17.52 17.68 18.40 T:xoodyakround3 21.44 21.76 21.79 T:schwaemm256128v2 25.50 25.77 25.78 T:schwaemm256256v2 27.22 27.54 27.67 T:grain128aeadv2 28.48 28.50 28.53 T:schwaemm192192v2 29.76 29.78 29.81 T:schwaemm128128v2 35.21 35.29 35.33 romulusn 36.23 36.40 36.50 T:isapa128v20 36.79 36.87 37.05 T:isapa128av20 40.35 40.72 41.16 T:giftcofb128v1 57.07 57.31 57.38 romulusm 62.17 62.22 62.25 T:tinyjambu128v2 66.67 66.88 67.27 T:isapk128av20 69.45 69.52 69.56 T:tinyjambu192v2 76.70 76.70 76.72 T:tinyjambu256v2 88.06 88.23 88.43 T:isapk128v20 115.60 115.61 115.97 romulust 164.47 165.11 165.82 T:isapxv20 255.29 255.53 255.86 T:elephant200v2 6832.43 6836.80 6838.34 T:elephant176v2 7652.24 7653.05 7654.41 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.69 1.70 1.70 T:aes128gcmv1 1.76 1.77 1.79 aes256gcmv1 6.66 6.67 6.67 ascon128av12 9.35 9.37 9.39 ascon80pqv12 9.37 9.39 9.41 ascon128v12 11.42 11.44 11.45 ascon128abi32v12 17.27 17.29 17.29 ascon128bi32v12 17.40 17.47 17.49 T:xoodyakround3 21.81 21.82 21.83 T:schwaemm256128v2 25.49 25.66 25.84 T:schwaemm256256v2 25.76 26.72 27.33 T:grain128aeadv2 28.63 28.99 29.06 T:schwaemm192192v2 29.91 30.01 30.03 T:schwaemm128128v2 35.36 35.53 35.54 romulusn 36.36 36.39 36.44 T:isapa128v20 36.69 36.70 36.94 T:isapa128av20 40.83 40.89 41.07 T:giftcofb128v1 57.19 57.69 57.71 romulusm 62.22 62.25 62.27 T:tinyjambu128v2 66.79 66.87 67.43 T:isapk128av20 69.31 69.34 69.35 T:tinyjambu192v2 76.79 76.80 76.81 T:tinyjambu256v2 88.09 88.35 88.69 T:isapk128v20 115.57 115.59 115.62 romulust 163.22 164.81 165.28 T:isapxv20 254.93 255.38 255.96 T:elephant200v2 6833.23 6837.62 6848.04 T:elephant176v2 7650.92 7652.91 7655.31 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.68 1.69 1.70 T:aes128gcmv1 1.76 1.77 1.78 aes256gcmv1 6.66 6.68 6.69 ascon128av12 9.32 9.37 9.40 ascon80pqv12 9.37 9.40 9.41 ascon128v12 11.43 11.44 11.44 ascon128abi32v12 17.12 17.12 17.14 ascon128bi32v12 17.54 17.56 17.58 T:xoodyakround3 18.19 18.19 18.24 T:isapa128v20 21.80 21.82 21.82 T:schwaemm256128v2 24.35 24.37 24.53 T:isapa128av20 25.48 25.58 25.67 T:schwaemm256256v2 25.55 26.99 27.31 T:grain128aeadv2 28.64 28.66 29.04 T:schwaemm192192v2 29.81 29.82 29.96 T:schwaemm128128v2 35.36 35.40 35.58 romulusn 38.86 38.87 38.88 romulust 40.78 40.99 41.10 T:giftcofb128v1 44.00 44.07 44.12 T:isapk128av20 54.78 54.82 54.93 T:isapk128v20 57.23 57.32 57.69 romulusm 62.19 62.21 62.29 T:tinyjambu128v2 69.32 69.32 69.33 T:tinyjambu192v2 76.78 76.81 76.82 T:tinyjambu256v2 98.22 98.33 98.57 T:isapxv20 255.26 255.47 255.71 T:elephant200v2 6833.53 6835.16 6836.70 T:elephant176v2 7652.30 7653.85 7656.10 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.02 1.03 T:aes128gcmv1 1.10 1.11 1.11 aes256gcmv1 6.58 6.58 6.61 ascon128av12 9.30 9.31 9.32 ascon80pqv12 9.30 9.31 9.34 ascon128v12 11.06 11.08 11.11 ascon128abi32v12 13.77 13.82 14.24 T:xoodyakround3 16.88 16.89 16.90 ascon128bi32v12 21.47 21.61 21.62 T:schwaemm256128v2 25.61 25.71 25.85 T:schwaemm256256v2 27.32 27.33 27.38 T:isapa128v20 27.27 27.33 27.41 T:grain128aeadv2 28.41 28.48 28.63 T:schwaemm192192v2 28.60 28.65 28.72 romulusn 29.65 29.83 29.87 T:schwaemm128128v2 30.76 30.84 30.86 T:isapa128av20 39.40 39.66 39.83 romulusm 40.33 40.35 41.03 T:giftcofb128v1 51.13 51.17 51.18 T:tinyjambu128v2 54.81 54.85 54.86 T:tinyjambu192v2 55.42 55.56 55.96 T:isapk128av20 58.44 58.47 58.54 T:tinyjambu256v2 71.46 71.56 71.60 T:isapk128v20 77.21 77.23 77.28 romulust 131.28 131.77 132.12 T:isapxv20 190.67 191.40 191.75 T:elephant200v2 5102.45 5103.21 5123.86 T:elephant176v2 5736.62 5737.02 5737.39 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.15 1.15 1.16 aes256gcmv1 6.52 6.53 6.54 ascon128av12 9.30 9.30 9.30 ascon128v12 9.30 9.30 9.30 ascon80pqv12 11.22 11.23 11.23 ascon128abi32v12 13.64 13.71 13.73 T:xoodyakround3 16.88 16.91 16.91 ascon128bi32v12 21.41 21.43 21.52 T:schwaemm256128v2 25.47 25.55 25.56 T:schwaemm256256v2 26.29 26.86 26.90 T:grain128aeadv2 27.30 27.32 27.33 T:isapa128v20 28.60 28.70 28.76 romulusn 28.51 28.70 28.73 T:schwaemm192192v2 29.69 29.71 29.87 T:schwaemm128128v2 30.63 30.71 30.78 T:isapa128av20 39.53 39.74 39.96 romulusm 40.55 40.57 41.00 T:giftcofb128v1 51.18 51.20 51.28 T:tinyjambu128v2 54.72 54.75 54.76 T:tinyjambu192v2 55.39 55.51 55.69 T:isapk128av20 58.47 58.52 58.57 T:tinyjambu256v2 71.49 71.56 71.59 T:isapk128v20 77.23 77.24 77.26 romulust 131.03 131.10 131.46 T:isapxv20 191.17 191.55 191.75 T:elephant200v2 5102.27 5103.01 5105.78 T:elephant176v2 5735.94 5736.90 5742.55 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.15 1.15 1.16 aes256gcmv1 6.57 6.57 6.57 ascon128av12 9.28 9.30 9.32 ascon128v12 9.29 9.30 9.30 ascon80pqv12 11.23 11.23 11.23 ascon128abi32v12 13.68 13.74 13.76 T:xoodyakround3 16.99 16.99 16.99 ascon128bi32v12 18.23 18.24 18.26 T:isapa128v20 21.39 21.40 21.54 T:schwaemm256128v2 24.40 24.42 24.45 T:isapa128av20 25.48 25.51 25.55 T:schwaemm256256v2 26.72 26.88 26.93 T:grain128aeadv2 28.45 28.47 28.62 T:schwaemm192192v2 28.69 28.71 28.90 romulusn 29.67 29.70 29.89 T:schwaemm128128v2 38.87 38.88 38.88 romulust 39.62 39.67 39.94 romulusm 40.54 40.62 40.96 T:giftcofb128v1 44.03 44.13 44.18 T:isapk128av20 51.19 51.22 51.23 T:tinyjambu128v2 54.74 54.75 54.76 T:tinyjambu192v2 54.80 54.89 55.06 T:isapk128v20 58.48 58.53 58.54 T:tinyjambu256v2 97.97 98.27 98.49 T:isapxv20 191.12 191.64 191.89 T:elephant200v2 5101.99 5106.33 5111.94 T:elephant176v2 5736.37 5737.01 5737.43 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.52 0.52 0.54 T:aes128gcmv1 0.53 0.54 0.56 aes256gcmv1 6.42 6.43 6.45 ascon128av12 9.22 9.22 9.23 ascon80pqv12 9.25 9.25 9.26 ascon128v12 9.90 9.95 9.97 T:xoodyakround3 10.81 10.83 10.83 ascon128abi32v12 16.57 16.57 16.57 ascon128bi32v12 18.14 18.25 18.35 T:isapa128v20 21.26 21.45 21.46 T:schwaemm256128v2 21.82 21.84 22.25 romulusn 21.79 22.00 22.05 romulusm 24.63 24.69 24.71 T:isapa128av20 25.41 25.43 25.57 T:schwaemm256256v2 27.08 27.41 27.48 T:grain128aeadv2 28.39 28.42 28.44 T:schwaemm192192v2 29.50 29.54 30.14 T:schwaemm128128v2 38.86 38.87 38.87 romulust 40.12 40.13 40.14 T:tinyjambu192v2 40.19 40.19 40.19 T:tinyjambu256v2 40.13 40.21 40.27 T:tinyjambu128v2 40.33 40.53 40.94 T:giftcofb128v1 44.00 44.04 44.10 T:isapk128av20 54.81 54.96 55.14 T:isapk128v20 97.47 98.41 98.84 T:isapxv20 128.10 128.18 128.37 T:elephant200v2 3372.45 3374.53 3376.12 T:elephant176v2 3821.27 3822.79 3824.34 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.52 0.54 0.54 T:aes128gcmv1 0.53 0.54 0.57 aes256gcmv1 6.35 6.37 6.37 ascon128av12 9.21 9.21 9.26 ascon80pqv12 9.21 9.24 9.26 ascon128v12 9.94 10.00 10.03 T:xoodyakround3 10.47 11.00 11.02 ascon128abi32v12 16.68 16.69 16.69 ascon128bi32v12 18.24 18.27 18.27 T:isapa128v20 21.46 21.46 21.47 T:schwaemm256128v2 21.87 22.02 22.19 romulusm 22.13 22.23 22.25 romulusn 24.37 24.40 24.66 T:isapa128av20 25.42 25.43 25.44 T:schwaemm256256v2 26.45 26.74 27.08 T:grain128aeadv2 28.10 28.41 28.42 T:schwaemm192192v2 29.50 29.53 29.54 T:schwaemm128128v2 38.83 38.87 38.92 romulust 40.14 40.16 40.17 T:tinyjambu192v2 40.20 40.20 40.21 T:tinyjambu256v2 40.17 40.23 40.23 T:tinyjambu128v2 40.36 40.50 40.92 T:giftcofb128v1 44.00 44.09 44.20 T:isapk128av20 54.77 54.88 54.91 T:isapk128v20 97.78 97.97 98.31 T:isapxv20 128.14 128.18 128.41 T:elephant200v2 3372.61 3373.54 3375.35 T:elephant176v2 3821.28 3821.65 3822.48 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.53 0.53 0.54 T:aes128gcmv1 0.55 0.55 0.55 aes256gcmv1 6.43 6.44 6.45 ascon128av12 9.21 9.23 9.25 ascon80pqv12 9.21 9.23 9.26 ascon128v12 9.89 9.96 9.98 T:xoodyakround3 10.99 11.01 11.02 ascon128abi32v12 16.70 16.84 16.86 ascon128bi32v12 18.26 18.28 18.33 T:isapa128v20 21.44 21.44 21.45 T:schwaemm256128v2 21.83 21.84 22.24 romulusn 21.86 22.02 22.29 romulusm 24.34 24.38 24.44 T:isapa128av20 25.42 25.42 25.43 T:schwaemm256256v2 26.53 26.74 26.99 T:grain128aeadv2 28.30 28.41 28.44 T:schwaemm192192v2 29.53 29.55 29.56 T:schwaemm128128v2 38.85 38.87 38.90 romulust 40.14 40.14 40.17 T:tinyjambu192v2 40.21 40.22 40.22 T:tinyjambu128v2 40.22 40.22 40.23 T:tinyjambu256v2 40.35 40.56 40.86 T:giftcofb128v1 43.96 44.06 44.25 T:isapk128av20 53.89 54.92 55.17 T:isapk128v20 97.89 98.06 98.44 T:isapxv20 128.23 128.35 128.37 T:elephant200v2 3372.79 3373.60 3382.86 T:elephant176v2 3821.47 3822.08 3822.92 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.16 T:aes128gcmv1 1.23 1.24 1.24 aes256gcmv1 6.78 6.78 6.78 ascon128av12 9.47 9.47 9.47 ascon128v12 9.47 9.47 9.47 ascon80pqv12 11.39 11.39 11.40 ascon128abi32v12 13.92 14.01 14.33 T:xoodyakround3 17.21 17.21 17.21 ascon128bi32v12 22.11 22.24 22.24 T:schwaemm256128v2 26.16 26.27 26.34 T:schwaemm256256v2 27.64 27.68 27.75 T:grain128aeadv2 28.84 28.85 28.95 romulusn 29.16 29.20 29.24 T:schwaemm192192v2 30.08 30.11 30.14 T:schwaemm128128v2 34.06 34.11 34.12 T:isapa128av20 39.88 39.91 39.95 T:isapa128v20 39.79 39.95 40.00 romulusm 40.78 41.04 41.41 T:giftcofb128v1 51.59 51.61 51.61 T:tinyjambu128v2 55.20 55.20 55.27 T:tinyjambu192v2 58.88 58.91 58.95 T:tinyjambu256v2 61.91 62.01 62.16 T:isapk128av20 78.43 78.44 78.47 romulust 123.28 123.36 123.49 T:isapk128v20 195.39 195.46 195.85 T:elephant200v2 213.14 213.29 213.52 T:isapxv20 5141.31 5144.50 5145.18 T:elephant176v2 5801.17 5801.40 5801.97 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.23 1.24 T:aes128gcmv1 1.29 1.30 1.30 aes256gcmv1 6.74 6.74 6.78 ascon128av12 9.46 9.47 9.47 ascon128v12 9.46 9.47 9.47 ascon80pqv12 11.53 11.53 11.53 ascon128abi32v12 13.84 13.87 13.90 T:xoodyakround3 17.23 17.23 17.23 ascon128bi32v12 22.05 22.06 22.27 T:schwaemm256128v2 26.17 26.19 26.23 T:schwaemm256256v2 26.97 27.24 27.44 T:grain128aeadv2 28.94 29.06 29.15 romulusn 29.21 29.32 29.34 T:schwaemm192192v2 30.10 30.11 30.31 T:schwaemm128128v2 33.94 33.97 34.06 T:isapa128av20 39.94 39.94 39.94 T:isapa128v20 40.08 40.18 40.29 romulusm 40.93 41.09 41.33 T:giftcofb128v1 51.58 51.59 51.61 T:tinyjambu128v2 55.14 55.17 55.18 T:tinyjambu192v2 58.92 58.92 58.98 T:tinyjambu256v2 61.88 61.96 62.17 T:isapk128av20 78.42 78.42 78.47 romulust 123.22 123.23 123.29 T:isapk128v20 195.54 195.58 195.93 T:elephant200v2 212.39 212.62 212.88 T:isapxv20 5141.18 5142.10 5144.35 T:elephant176v2 5801.53 5801.97 5803.82 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.23 1.23 1.23 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 6.76 6.76 6.76 ascon128av12 9.45 9.46 9.49 ascon128v12 9.46 9.46 9.46 ascon80pqv12 11.53 11.53 11.53 ascon128abi32v12 13.91 13.93 13.94 T:xoodyakround3 17.23 17.30 17.30 ascon128bi32v12 22.05 22.05 22.06 T:schwaemm256128v2 24.64 24.64 24.64 T:isapa128v20 26.24 26.24 26.35 T:isapa128av20 26.21 26.33 26.43 T:schwaemm256256v2 27.08 27.21 27.25 T:grain128aeadv2 28.87 28.93 28.96 romulusn 29.11 29.21 29.25 T:schwaemm192192v2 30.09 30.13 30.33 T:schwaemm128128v2 40.00 40.01 40.01 romulust 40.08 40.19 40.36 romulusm 40.95 41.07 41.28 T:giftcofb128v1 47.76 47.79 47.79 T:isapk128av20 51.57 51.60 51.63 T:tinyjambu128v2 55.16 55.17 55.17 T:tinyjambu192v2 58.93 58.93 58.94 T:tinyjambu256v2 81.30 81.32 81.35 T:isapk128v20 139.80 139.86 140.06 T:isapxv20 195.55 195.72 195.97 T:elephant200v2 5141.57 5142.91 5150.46 T:elephant176v2 5801.45 5801.73 5801.99 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.86 5.94 6.12 T:aes128gcmv1 6.57 6.63 6.73 aes256gcmv1 10.86 11.20 11.57 ascon128av12 12.80 12.92 13.26 ascon80pqv12 12.70 13.23 13.72 ascon128v12 18.41 18.41 19.05 ascon128abi32v12 20.58 20.68 20.80 T:xoodyakround3 24.12 24.62 24.87 ascon128bi32v12 34.97 35.08 35.16 romulusn 35.65 35.73 36.16 T:grain128aeadv2 36.23 36.36 36.41 T:schwaemm256128v2 40.05 40.11 40.23 T:schwaemm128128v2 41.64 41.68 41.82 T:schwaemm256256v2 47.38 47.52 47.99 T:schwaemm192192v2 48.31 48.63 48.87 romulusm 49.41 49.66 49.87 T:giftcofb128v1 60.35 60.49 60.67 T:tinyjambu128v2 64.76 64.80 64.99 T:tinyjambu192v2 68.78 68.78 68.93 T:tinyjambu256v2 105.71 106.09 106.56 romulust 109.40 109.52 109.96 T:isapa128av20 198.95 199.38 200.12 T:isapk128av20 277.66 278.02 278.63 T:elephant200v2 328.55 328.89 330.42 T:isapa128v20 1296.54 1296.98 1297.88 T:isapk128v20 2062.90 2064.88 2074.77 T:isapxv20 6402.12 6403.52 6431.47 T:elephant176v2 7765.51 7770.05 7772.21 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.91 5.96 6.05 T:aes128gcmv1 6.73 6.78 6.84 aes256gcmv1 11.02 11.34 11.70 ascon128av12 12.71 13.05 13.39 ascon128v12 12.81 13.38 13.59 ascon80pqv12 18.37 18.77 18.99 ascon128abi32v12 20.38 20.45 20.98 T:xoodyakround3 24.44 24.80 25.31 ascon128bi32v12 34.77 34.89 35.02 romulusn 35.28 35.34 35.42 T:grain128aeadv2 36.25 36.31 36.33 T:schwaemm256128v2 40.09 40.34 40.55 T:schwaemm128128v2 41.62 41.65 41.78 T:schwaemm256256v2 47.48 47.74 48.07 T:schwaemm192192v2 49.79 49.94 50.36 T:giftcofb128v1 50.59 50.86 51.14 romulusm 60.97 61.02 61.02 T:tinyjambu128v2 64.70 64.84 64.88 T:tinyjambu192v2 68.89 68.92 68.95 T:tinyjambu256v2 105.51 105.67 105.82 romulust 109.45 109.50 110.04 T:isapa128av20 199.10 199.30 199.62 T:isapk128av20 277.98 278.44 279.61 T:elephant200v2 328.29 328.29 330.64 T:isapa128v20 1296.70 1296.88 1298.05 T:isapk128v20 2060.02 2060.88 2065.09 T:isapxv20 6401.81 6407.60 6427.58 T:elephant176v2 7770.50 7771.27 7773.68 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.87 5.88 5.91 T:aes128gcmv1 6.77 6.80 6.81 aes256gcmv1 10.99 11.01 11.11 ascon128av12 12.73 12.74 13.15 ascon128v12 12.97 13.14 13.27 ascon80pqv12 18.22 18.34 18.59 ascon128abi32v12 20.55 20.64 21.23 T:xoodyakround3 24.34 24.34 24.34 ascon128bi32v12 34.77 34.88 34.88 romulusn 35.25 35.38 35.45 T:grain128aeadv2 36.26 36.44 36.66 T:schwaemm256128v2 40.05 40.09 40.19 T:schwaemm128128v2 41.52 41.61 41.73 T:schwaemm256256v2 47.71 47.75 48.13 T:schwaemm192192v2 49.95 49.96 50.11 T:giftcofb128v1 50.16 50.55 50.66 romulusm 60.92 61.12 61.12 T:tinyjambu128v2 64.63 64.66 64.97 T:tinyjambu192v2 65.83 65.93 66.11 romulust 68.22 68.30 68.63 T:isapa128av20 68.76 68.76 68.98 T:tinyjambu256v2 125.09 125.30 125.34 T:isapk128av20 170.06 170.06 171.58 T:isapa128v20 277.73 277.85 278.58 T:elephant200v2 678.38 678.75 679.73 T:isapk128v20 1079.28 1081.08 1082.57 T:isapxv20 6404.97 6406.41 6408.47 T:elephant176v2 7767.27 7771.30 7774.65 T:elephant160v2