VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.93 0.95 0.96 T:aes128gcmv1 1.04 1.06 1.08 aes256gcmv1 6.70 6.78 6.89 ascon128av12 9.91 10.03 10.16 ascon128v12 10.08 10.15 10.19 ascon80pqv12 12.53 12.62 12.70 T:schwaemm256128v2 12.94 13.13 13.26 ascon128abi32v12 14.03 14.09 14.16 T:xoodyakround3 16.52 16.64 16.77 T:schwaemm192192v2 17.19 17.24 17.28 T:schwaemm256256v2 18.26 18.30 18.32 T:schwaemm128128v2 19.04 19.16 19.27 ascon128bi32v12 23.63 23.65 23.69 T:grain128aeadv2 32.78 32.85 32.91 T:giftcofb128v1 38.15 38.45 38.70 T:isapa128v20 38.77 38.79 38.84 romulusn 39.27 39.56 39.82 T:isapa128av20 47.69 47.78 47.88 T:isapk128av20 62.72 62.79 62.86 romulusm 64.19 64.74 65.77 T:isapk128v20 65.56 65.59 65.69 T:tinyjambu128v2 77.78 77.84 77.89 T:tinyjambu192v2 83.83 84.02 84.07 T:tinyjambu256v2 129.84 129.97 130.09 romulust 140.06 140.69 140.97 T:isapxv20 169.68 170.23 171.02 T:elephant200v2 5034.29 5036.36 5038.92 T:elephant176v2 5600.83 5605.00 5606.45 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.67 0.69 0.70 T:aes128gcmv1 0.80 0.81 0.83 aes256gcmv1 6.70 6.72 6.75 ascon128av12 9.98 10.01 10.10 ascon128v12 9.95 10.05 10.13 ascon80pqv12 12.44 12.52 12.62 T:schwaemm256128v2 13.11 13.17 13.21 ascon128abi32v12 13.96 13.99 14.02 T:xoodyakround3 16.42 16.48 16.56 T:schwaemm192192v2 17.17 17.28 17.36 T:schwaemm256256v2 18.12 18.15 18.18 T:schwaemm128128v2 19.37 19.43 19.47 ascon128bi32v12 23.05 23.10 23.12 T:grain128aeadv2 32.77 32.82 32.87 T:giftcofb128v1 38.16 38.44 38.67 T:isapa128v20 38.79 38.84 38.90 romulusn 39.42 39.70 39.90 T:isapa128av20 47.69 47.75 47.83 T:isapk128av20 62.98 63.01 63.07 romulusm 64.11 64.64 65.63 T:isapk128v20 65.08 65.10 65.13 T:tinyjambu128v2 77.84 77.97 78.06 T:tinyjambu192v2 83.87 83.94 84.05 T:tinyjambu256v2 129.78 129.91 129.99 romulust 135.65 136.99 138.69 T:isapxv20 161.98 162.93 171.06 T:elephant200v2 5034.37 5036.41 5037.49 T:elephant176v2 5600.41 5605.60 5615.70 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.69 0.70 T:aes128gcmv1 0.80 0.82 0.83 aes256gcmv1 6.68 6.70 6.72 ascon128av12 9.88 10.06 10.14 ascon80pqv12 10.03 10.07 10.10 ascon128v12 12.45 12.51 12.62 T:schwaemm256128v2 13.10 13.15 13.20 ascon128abi32v12 13.95 13.99 14.04 T:xoodyakround3 16.40 16.53 16.67 T:schwaemm192192v2 17.16 17.25 17.32 T:schwaemm256256v2 18.14 18.17 18.20 T:schwaemm128128v2 18.62 18.77 19.02 T:isapa128v20 19.38 19.43 19.52 ascon128bi32v12 23.06 23.10 23.13 T:grain128aeadv2 26.05 26.58 26.79 T:isapa128av20 32.08 32.13 32.16 T:isapk128av20 32.81 32.85 32.89 T:giftcofb128v1 38.82 38.85 38.91 romulusn 40.26 40.32 40.48 T:isapk128v20 44.83 44.94 44.98 romulust 63.01 63.03 63.10 romulusm 65.43 65.61 65.65 T:tinyjambu128v2 77.40 78.04 78.08 T:tinyjambu192v2 80.03 80.55 80.86 T:isapxv20 84.02 84.09 84.11 T:tinyjambu256v2 162.94 164.13 164.82 T:elephant200v2 5034.76 5036.54 5038.24 T:elephant176v2 5605.98 5607.16 5616.33 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.61 0.63 0.64 T:aes128gcmv1 0.68 0.69 0.70 aes256gcmv1 6.71 6.77 6.81 ascon128av12 9.98 10.07 10.15 ascon128v12 10.11 10.17 10.19 ascon80pqv12 10.83 10.85 10.88 T:xoodyakround3 12.46 12.49 12.56 T:schwaemm256128v2 13.27 13.31 13.35 ascon128abi32v12 16.40 16.46 16.54 T:schwaemm192192v2 17.09 17.19 17.22 T:schwaemm256256v2 18.25 18.27 18.33 T:schwaemm128128v2 19.20 19.25 19.30 ascon128bi32v12 23.60 23.62 23.67 T:grain128aeadv2 28.57 28.69 28.78 T:isapa128v20 31.13 31.17 31.21 romulusn 32.84 32.99 33.12 T:isapa128av20 33.00 33.02 33.05 T:giftcofb128v1 40.40 40.60 40.80 T:isapk128av20 42.93 42.96 43.00 romulusm 52.66 53.04 53.32 T:isapk128v20 53.51 53.59 53.62 T:tinyjambu128v2 60.93 60.95 60.96 T:tinyjambu192v2 63.36 63.41 63.42 T:tinyjambu256v2 87.23 87.30 87.37 romulust 113.30 113.56 114.01 T:isapxv20 123.51 125.16 125.46 T:elephant200v2 3760.17 3761.23 3762.57 T:elephant176v2 4198.10 4199.93 4204.10 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.48 0.50 0.51 T:aes128gcmv1 0.55 0.57 0.57 aes256gcmv1 6.68 6.69 6.72 ascon128av12 10.01 10.06 10.13 ascon80pqv12 10.04 10.08 10.11 ascon128v12 10.76 10.79 10.82 T:xoodyakround3 12.34 12.42 12.47 T:schwaemm256128v2 13.19 13.24 13.31 ascon128abi32v12 16.41 16.44 16.48 T:schwaemm192192v2 17.10 17.15 17.21 T:schwaemm256256v2 18.17 18.18 18.22 T:schwaemm128128v2 19.39 19.45 19.50 ascon128bi32v12 23.35 23.37 23.40 T:grain128aeadv2 28.63 28.74 28.91 T:isapa128v20 31.15 31.18 31.22 romulusn 32.95 33.01 33.03 T:giftcofb128v1 32.94 33.05 33.12 T:isapa128av20 40.21 40.32 40.48 T:isapk128av20 43.10 43.13 43.18 romulusm 52.62 52.87 53.23 T:isapk128v20 53.59 53.60 53.62 T:tinyjambu128v2 60.94 61.02 61.11 T:tinyjambu192v2 63.39 63.41 63.45 T:tinyjambu256v2 87.22 87.30 87.35 romulust 108.56 109.03 109.67 T:isapxv20 126.13 126.33 127.45 T:elephant200v2 3760.73 3762.18 3763.21 T:elephant176v2 4198.49 4201.55 4207.25 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 6.67 6.71 6.73 ascon128av12 9.99 10.05 10.11 ascon80pqv12 10.04 10.07 10.10 ascon128v12 10.78 10.81 10.84 T:xoodyakround3 12.36 12.39 12.45 T:schwaemm256128v2 13.20 13.25 13.29 ascon128abi32v12 16.38 16.44 16.50 T:schwaemm192192v2 17.10 17.15 17.22 T:schwaemm256256v2 18.20 18.22 18.24 T:schwaemm128128v2 18.91 18.97 19.05 T:isapa128v20 19.42 19.47 19.51 ascon128bi32v12 23.35 23.37 23.39 T:grain128aeadv2 26.40 26.55 26.62 T:isapa128av20 31.16 31.19 31.21 romulusn 32.22 32.48 32.72 T:isapk128av20 32.99 33.02 33.05 T:giftcofb128v1 40.55 40.84 40.96 T:isapk128v20 43.12 43.14 43.17 romulusm 44.70 44.77 44.85 romulust 53.56 53.60 53.62 T:tinyjambu128v2 60.95 61.04 61.07 T:tinyjambu192v2 63.40 63.41 63.43 T:tinyjambu256v2 81.97 82.14 82.27 T:isapxv20 121.24 121.30 124.21 T:elephant200v2 3760.27 3761.35 3762.37 T:elephant176v2 4198.41 4201.39 4208.51 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.28? 0.31? 0.32? T:aes128gcmv1 0.27? 0.31? 0.32? aes256gcmv1 6.67 6.69 6.72 ascon128av12 7.58 7.62 7.64 T:xoodyakround3 9.80 10.01 10.09 ascon80pqv12 10.04 10.07 10.13 ascon128v12 12.31 12.40 12.43 T:schwaemm256128v2 13.30 13.35 13.41 ascon128abi32v12 16.32 16.41 16.61 T:schwaemm192192v2 16.99 17.08 17.13 T:schwaemm256256v2 18.21 18.27 18.31 T:schwaemm128128v2 18.81 18.95 19.25 T:isapa128v20 19.39 19.46 19.62 ascon128bi32v12 23.16 23.19 23.21 romulusm 23.43 23.47 23.51 romulusn 23.64 23.69 23.72 T:grain128aeadv2 26.34 26.39 26.44 T:isapa128av20 32.00 32.10 32.18 T:isapk128av20 33.21 33.24 33.29 T:giftcofb128v1 40.64 40.68 40.74 T:isapk128v20 41.53 41.57 41.65 T:tinyjambu128v2 42.57 42.78 42.82 T:tinyjambu256v2 43.82 43.85 43.87 T:tinyjambu192v2 44.61 44.67 44.74 romulust 82.34 83.45 84.50 T:elephant200v2 85.85 86.27 86.46 T:isapxv20 2486.36 2487.49 2488.52 T:elephant176v2 2799.65 2800.55 2801.51 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.64 6.69 6.71 ascon128av12 7.59 7.62 7.65 T:xoodyakround3 10.04 10.07 10.12 ascon80pqv12 10.07 10.09 10.14 ascon128v12 12.31 12.38 12.45 T:schwaemm256128v2 13.30 13.35 13.41 ascon128abi32v12 16.32 16.39 16.42 T:schwaemm192192v2 16.98 17.06 17.13 T:schwaemm256256v2 18.18 18.20 18.23 T:schwaemm128128v2 18.97 19.04 19.17 T:isapa128v20 19.37 19.43 19.45 ascon128bi32v12 23.23 23.26 23.29 romulusm 23.44 23.48 23.54 romulusn 23.63 23.66 23.70 T:grain128aeadv2 26.35 26.38 26.46 T:isapa128av20 32.00 32.06 32.19 T:isapk128av20 33.17 33.22 33.26 T:giftcofb128v1 40.61 40.63 40.73 T:isapk128v20 41.30 41.35 41.40 T:tinyjambu128v2 42.64 42.70 42.75 T:tinyjambu256v2 43.73 43.80 43.99 T:tinyjambu192v2 44.63 44.70 44.76 romulust 81.05 81.32 82.17 T:isapxv20 83.45 83.95 84.14 T:elephant200v2 2484.48 2485.44 2487.24 T:elephant176v2 2774.73 2777.19 2779.45 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.67 6.68 6.71 ascon128av12 7.57 7.61 7.66 T:xoodyakround3 10.04 10.06 10.12 ascon128v12 10.03 10.07 10.11 ascon80pqv12 12.38 12.44 12.51 T:schwaemm256128v2 13.31 13.34 13.38 ascon128abi32v12 16.28 16.35 16.44 T:schwaemm192192v2 17.02 17.14 17.18 T:schwaemm256256v2 18.25 18.27 18.31 T:schwaemm128128v2 18.93 19.06 19.16 T:isapa128v20 19.37 19.46 19.53 ascon128bi32v12 23.19 23.22 23.27 romulusm 23.44 23.48 23.52 romulusn 23.64 23.68 23.72 T:grain128aeadv2 26.35 26.42 26.48 T:isapa128av20 32.00 32.05 32.11 T:isapk128av20 33.15 33.21 33.27 T:giftcofb128v1 40.66 40.70 40.99 T:isapk128v20 41.33 41.40 41.43 T:tinyjambu128v2 42.63 42.76 42.82 T:tinyjambu256v2 43.81 43.87 44.04 T:tinyjambu192v2 44.61 44.66 44.76 romulust 81.00 81.39 81.50 T:isapxv20 83.30 84.14 84.68 T:elephant200v2 2486.24 2486.99 2487.67 T:elephant176v2 2798.91 2800.96 2803.43 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.74 0.74 0.75 T:aes128gcmv1 0.81 0.82 0.83 aes256gcmv1 6.88 6.92 6.94 ascon128av12 10.11 10.18 10.25 ascon80pqv12 10.12 10.19 10.27 ascon128v12 10.94 10.96 10.98 T:xoodyakround3 12.82 12.85 12.89 T:schwaemm256128v2 13.54 13.59 13.68 ascon128abi32v12 16.81 16.84 16.88 T:schwaemm192192v2 17.59 17.63 17.69 T:schwaemm256256v2 18.46 18.50 18.53 T:schwaemm128128v2 19.64 19.69 19.95 ascon128bi32v12 23.95 23.98 23.99 T:grain128aeadv2 31.50 31.52 31.61 romulusn 33.26 33.28 33.30 T:giftcofb128v1 34.86 35.14 35.18 T:isapa128av20 41.62 41.67 41.77 T:isapa128v20 43.25 43.29 43.31 romulusm 45.67 45.77 45.91 T:isapk128av20 54.04 54.11 54.15 T:tinyjambu128v2 61.47 61.47 61.49 T:tinyjambu192v2 63.93 63.97 63.98 T:tinyjambu256v2 88.56 88.59 88.64 romulust 90.94 91.16 91.30 T:isapk128v20 127.99 128.35 129.55 T:elephant200v2 183.96 184.09 185.00 T:isapxv20 3789.41 3790.27 3791.10 T:elephant176v2 4246.53 4249.14 4251.71 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.60 0.61 0.61 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 6.85 6.86 6.88 ascon128av12 10.16 10.19 10.22 ascon128v12 10.16 10.20 10.26 ascon80pqv12 10.88 10.90 10.91 T:xoodyakround3 12.73 12.77 12.82 T:schwaemm256128v2 13.52 13.54 13.59 ascon128abi32v12 16.79 16.83 16.88 T:schwaemm192192v2 17.58 17.64 17.69 T:schwaemm256256v2 18.42 18.44 18.45 T:schwaemm128128v2 19.72 19.75 19.80 ascon128bi32v12 23.69 23.70 23.72 T:grain128aeadv2 31.53 31.55 31.56 romulusn 33.26 33.29 33.31 T:giftcofb128v1 34.90 35.03 35.13 T:isapa128av20 41.59 41.68 41.72 T:isapa128v20 43.43 43.45 43.48 romulusm 45.64 45.73 45.81 T:isapk128av20 54.11 54.12 54.14 T:tinyjambu128v2 61.59 61.61 61.62 T:tinyjambu192v2 63.90 63.97 63.98 T:tinyjambu256v2 88.53 88.59 88.66 romulust 90.88 91.03 91.21 T:isapk128v20 128.59 128.68 128.77 T:elephant200v2 179.86 180.26 180.62 T:isapxv20 3788.20 3788.78 3790.92 T:elephant176v2 4249.50 4252.18 4255.79 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 6.83 6.84 6.85 ascon128av12 10.16 10.20 10.23 ascon80pqv12 10.17 10.22 10.23 ascon128v12 10.88 10.91 10.93 T:xoodyakround3 12.74 12.76 12.79 T:schwaemm256128v2 13.53 13.57 13.59 ascon128abi32v12 16.80 16.85 16.96 T:schwaemm192192v2 17.58 17.63 17.67 T:schwaemm256256v2 18.43 18.45 18.49 T:schwaemm128128v2 19.71 19.75 19.83 ascon128bi32v12 23.69 23.72 23.72 T:grain128aeadv2 25.51 25.58 25.62 T:isapa128v20 27.42 27.57 27.69 T:isapa128av20 31.54 31.56 31.60 romulusn 33.28 33.30 33.32 T:giftcofb128v1 35.63 35.67 35.72 T:isapk128av20 43.41 43.46 43.48 romulusm 45.98 46.03 46.08 romulust 54.11 54.13 54.15 T:tinyjambu128v2 60.54 60.57 60.59 T:isapk128v20 61.59 61.61 61.62 T:tinyjambu192v2 63.97 63.98 64.00 T:tinyjambu256v2 117.92 117.98 118.03 T:isapxv20 126.23 126.58 128.54 T:elephant200v2 3788.35 3790.29 3791.23 T:elephant176v2 4247.91 4250.61 4252.03 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.02 5.20 5.30 T:aes128gcmv1 5.70 5.82 5.99 aes256gcmv1 10.04 10.16 10.32 ascon128av12 13.16 13.22 13.36 ascon80pqv12 13.12 13.37 13.45 ascon128v12 15.66 15.73 15.91 T:xoodyakround3 20.38 20.59 20.71 ascon128abi32v12 20.78 21.10 21.64 T:schwaemm256128v2 23.51 23.83 23.94 T:schwaemm128128v2 26.64 26.77 26.85 ascon128bi32v12 26.94 27.36 27.85 T:schwaemm192192v2 27.85 28.51 28.90 T:schwaemm256256v2 31.44 31.50 31.56 T:grain128aeadv2 39.31 39.56 39.66 T:giftcofb128v1 40.16 40.32 40.48 romulusn 49.69 49.88 50.29 romulusm 65.39 65.92 66.54 T:tinyjambu128v2 73.96 74.72 75.19 T:tinyjambu192v2 76.84 77.27 78.02 T:tinyjambu256v2 81.79 81.98 82.35 T:isapa128av20 117.69 117.96 118.26 romulust 156.81 157.17 158.01 T:isapk128av20 179.31 179.70 181.84 T:elephant200v2 337.73 339.45 340.21 T:isapa128v20 954.12 958.34 960.57 T:isapk128v20 1796.02 1796.67 1798.18 T:isapxv20 4717.21 4721.70 4726.52 T:elephant176v2 5686.39 5693.39 5695.66 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.35 5.51 5.59 T:aes128gcmv1 5.91 6.00 6.17 aes256gcmv1 10.12 10.26 10.52 ascon128av12 13.09 13.27 13.50 ascon80pqv12 13.17 13.31 13.40 ascon128v12 15.64 15.89 16.27 T:xoodyakround3 20.26 20.58 20.71 ascon128abi32v12 20.78 21.09 21.73 T:schwaemm256128v2 23.37 23.50 23.70 T:schwaemm128128v2 26.71 26.93 27.02 ascon128bi32v12 27.05 27.55 27.76 T:schwaemm192192v2 27.96 28.37 28.81 T:schwaemm256256v2 31.27 31.32 31.41 T:grain128aeadv2 39.40 39.47 39.65 T:giftcofb128v1 40.23 40.34 40.45 romulusn 50.96 51.11 51.41 romulusm 69.12 70.38 71.22 T:tinyjambu128v2 75.26 75.98 76.20 T:tinyjambu192v2 76.82 77.02 77.33 T:tinyjambu256v2 81.45 81.81 82.20 T:isapa128av20 117.98 118.30 119.12 romulust 156.89 157.35 157.69 T:isapk128av20 176.84 177.91 178.74 T:elephant200v2 337.34 338.96 340.51 T:isapa128v20 954.48 954.92 955.88 T:isapk128v20 1789.48 1790.38 1799.17 T:isapxv20 4714.46 4718.16 4722.20 T:elephant176v2 5695.76 5696.91 5844.92 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.27 5.45 5.66 T:aes128gcmv1 5.92 6.05 6.20 aes256gcmv1 10.05 10.19 10.27 ascon128av12 13.02 13.16 13.24 ascon80pqv12 13.12 13.23 13.40 ascon128v12 15.80 16.16 16.30 T:xoodyakround3 20.27 20.37 20.47 ascon128abi32v12 20.73 20.88 21.22 T:schwaemm256128v2 23.39 23.55 23.67 T:schwaemm128128v2 26.82 26.91 26.98 ascon128bi32v12 26.95 27.18 27.52 T:schwaemm192192v2 27.64 27.90 28.34 T:schwaemm256256v2 31.30 31.33 31.38 T:grain128aeadv2 39.53 39.65 39.71 T:giftcofb128v1 40.25 40.41 40.57 romulusn 51.01 51.05 51.12 romulusm 54.50 54.59 55.02 T:isapa128av20 64.91 65.95 67.46 T:tinyjambu128v2 73.86 74.17 75.57 T:tinyjambu192v2 74.63 75.53 76.36 romulust 76.69 76.89 77.37 T:tinyjambu256v2 102.24 102.46 102.82 T:isapk128av20 177.69 178.23 178.52 T:isapa128v20 176.99 180.61 180.98 T:elephant200v2 504.73 505.06 505.33 T:isapk128v20 936.11 936.81 942.04 T:isapxv20 4721.40 4725.52 4728.59 T:elephant176v2 5689.34 5691.67 5694.96 T:elephant160v2