VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.07 1.08 1.09 aes256gcmv1 6.28 6.30 6.31 ascon128av12 9.34 9.37 9.38 ascon128v12 9.35 9.39 9.40 ascon80pqv12 11.41 11.43 11.45 ascon128abi32v12 13.79 13.82 13.86 T:xoodyakround3 16.39 16.41 16.45 ascon128bi32v12 16.37 17.41 17.49 T:schwaemm256128v2 21.68 21.74 21.77 T:schwaemm192192v2 22.68 22.92 23.19 T:schwaemm128128v2 24.14 24.25 24.78 T:schwaemm256256v2 25.14 25.18 25.23 T:grain128aeadv2 31.60 31.63 31.76 T:giftcofb128v1 35.21 35.24 35.27 T:isapa128av20 35.56 35.63 35.71 T:isapa128v20 36.25 36.37 36.40 romulusn 51.65 51.69 51.72 T:tinyjambu128v2 59.49 59.65 59.71 romulusm 59.74 59.88 60.12 T:isapk128av20 63.69 63.74 63.80 T:tinyjambu192v2 73.54 73.59 73.62 T:tinyjambu256v2 78.41 79.39 80.02 T:isapk128v20 122.83 122.87 122.90 romulust 164.63 166.30 170.76 T:isapxv20 176.21 177.18 178.82 T:elephant200v2 6367.23 6393.04 6418.55 T:elephant176v2 7355.40 7365.83 7421.96 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.96 0.97 0.98 T:aes128gcmv1 1.15 1.17 1.19 aes256gcmv1 6.30 6.31 6.33 ascon128av12 9.34 9.35 9.37 ascon128v12 9.35 9.36 9.39 ascon80pqv12 11.32 11.34 11.37 ascon128abi32v12 13.77 13.88 14.07 T:xoodyakround3 16.25 16.36 16.40 ascon128bi32v12 16.38 16.39 16.40 T:schwaemm256128v2 21.69 21.73 21.76 T:schwaemm192192v2 22.68 23.13 23.21 T:schwaemm128128v2 24.17 24.25 24.74 T:schwaemm256256v2 25.46 25.50 25.54 T:grain128aeadv2 31.57 31.59 31.64 T:giftcofb128v1 35.23 35.26 35.31 T:isapa128av20 35.60 35.65 35.69 T:isapa128v20 36.27 36.34 36.45 romulusn 51.70 51.76 51.95 T:tinyjambu128v2 59.22 59.61 59.67 romulusm 59.64 59.86 59.98 T:isapk128av20 63.72 63.76 63.79 T:tinyjambu192v2 73.64 73.66 73.70 T:tinyjambu256v2 79.19 79.48 79.93 T:isapk128v20 122.83 122.85 122.93 romulust 161.57 165.97 169.02 T:isapxv20 175.97 176.91 178.64 T:elephant200v2 6371.26 6392.74 6418.99 T:elephant176v2 7351.61 7366.25 7423.04 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.95 0.96 0.97 T:aes128gcmv1 1.16 1.17 1.18 aes256gcmv1 6.32 6.33 6.36 ascon128av12 9.35 9.36 9.39 ascon128v12 9.34 9.36 9.39 ascon80pqv12 11.33 11.35 11.37 ascon128abi32v12 13.87 13.97 14.10 T:xoodyakround3 16.26 16.36 16.39 ascon128bi32v12 16.35 16.38 16.39 T:schwaemm256128v2 17.82 17.90 17.93 T:isapa128v20 21.70 21.74 21.75 T:schwaemm192192v2 22.69 23.18 23.30 T:schwaemm128128v2 23.50 23.53 23.58 T:isapa128av20 24.17 24.26 24.83 T:schwaemm256256v2 25.46 25.51 25.57 T:grain128aeadv2 31.54 31.59 31.61 T:giftcofb128v1 36.26 36.37 36.46 romulusn 39.71 39.86 39.98 T:isapk128av20 41.96 42.01 42.05 romulust 49.57 49.84 50.14 T:isapk128v20 51.65 51.73 51.92 T:tinyjambu128v2 59.57 59.67 59.77 romulusm 63.68 63.72 63.76 T:tinyjambu192v2 73.65 73.68 73.70 T:tinyjambu256v2 95.54 97.31 99.34 T:isapxv20 176.20 177.20 178.67 T:elephant200v2 6393.91 6418.38 6440.27 T:elephant176v2 7352.17 7368.11 7422.02 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.69 0.70 0.71 T:aes128gcmv1 0.75 0.76 0.77 aes256gcmv1 6.21 6.25 6.33 ascon128av12 9.31 9.33 9.36 ascon128v12 9.33 9.36 9.38 ascon80pqv12 10.63 10.71 10.74 T:xoodyakround3 11.24 11.27 11.29 ascon128abi32v12 16.44 16.46 16.47 ascon128bi32v12 16.25 16.88 16.91 T:schwaemm256128v2 21.59 21.62 21.72 T:schwaemm192192v2 22.98 23.03 23.05 T:schwaemm128128v2 23.97 24.03 24.67 T:schwaemm256256v2 25.10 25.13 25.14 T:grain128aeadv2 26.81 26.83 26.87 T:isapa128v20 29.40 29.42 29.43 T:isapa128av20 29.73 29.75 29.80 romulusn 31.65 31.71 31.75 T:giftcofb128v1 41.35 41.41 41.44 romulusm 42.25 42.27 42.29 T:tinyjambu128v2 50.00 50.03 50.05 T:tinyjambu192v2 49.99 50.20 50.33 T:isapk128av20 53.70 53.74 53.77 T:tinyjambu256v2 64.72 65.09 65.20 T:isapk128v20 82.48 82.50 82.55 romulust 129.93 131.85 132.71 T:isapxv20 131.66 132.90 133.52 T:elephant200v2 4788.45 4797.35 4803.41 T:elephant176v2 5544.67 5556.83 5578.06 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.70 0.72 0.73 T:aes128gcmv1 0.80 0.83 0.84 aes256gcmv1 6.22 6.24 6.28 ascon128av12 9.31 9.32 9.36 ascon128v12 9.32 9.34 9.36 ascon80pqv12 10.52 10.65 10.71 T:xoodyakround3 11.20 11.22 11.25 ascon128abi32v12 16.26 16.30 16.33 T:schwaemm256128v2 16.37 16.43 16.63 ascon128bi32v12 21.58 21.60 21.72 T:schwaemm192192v2 23.04 23.08 23.11 T:schwaemm128128v2 23.97 24.03 24.69 T:schwaemm256256v2 25.23 25.29 25.31 T:grain128aeadv2 26.80 26.85 26.86 T:isapa128v20 29.40 29.43 29.45 T:isapa128av20 29.72 29.77 29.86 romulusn 31.64 31.68 31.70 T:giftcofb128v1 41.34 41.39 41.45 romulusm 42.26 42.28 42.37 T:tinyjambu128v2 49.99 50.01 50.03 T:tinyjambu192v2 49.94 50.06 50.24 T:isapk128av20 53.73 53.75 53.78 T:tinyjambu256v2 64.72 64.86 65.12 T:isapk128v20 82.44 82.48 82.54 romulust 129.74 131.96 132.98 T:isapxv20 131.50 132.55 132.94 T:elephant200v2 4785.81 4795.11 4800.99 T:elephant176v2 5552.05 5557.23 5579.71 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.71 0.71 0.72 T:aes128gcmv1 0.82 0.82 0.83 aes256gcmv1 6.20 6.23 6.24 ascon128av12 9.31 9.32 9.34 ascon128v12 9.33 9.34 9.36 ascon80pqv12 10.54 10.62 10.70 T:xoodyakround3 11.19 11.21 11.23 ascon128abi32v12 16.27 16.28 16.30 T:schwaemm256128v2 16.35 16.43 16.62 ascon128bi32v12 17.92 17.95 17.98 T:isapa128v20 21.62 21.65 21.72 T:schwaemm192192v2 22.95 23.05 23.09 T:schwaemm128128v2 23.54 23.55 23.58 T:isapa128av20 23.97 24.05 24.63 T:schwaemm256256v2 25.24 25.30 25.32 T:grain128aeadv2 29.70 29.78 29.83 romulusn 31.64 31.68 31.70 T:giftcofb128v1 40.15 40.19 40.28 T:isapk128av20 41.40 41.45 41.47 romulusm 42.04 42.05 42.08 romulust 42.26 42.29 42.40 T:tinyjambu128v2 49.98 49.99 50.01 T:tinyjambu192v2 49.92 50.10 50.23 T:isapk128v20 53.74 53.75 53.79 T:tinyjambu256v2 96.39 97.69 98.49 T:isapxv20 131.59 132.87 133.10 T:elephant200v2 4783.19 4794.30 4801.79 T:elephant176v2 5545.07 5554.62 5572.54 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.45 0.47 0.47 aes256gcmv1 0.46 0.47 0.48 T:aes128gcmv1 6.13 6.15 6.17 ascon128av12 7.37 7.39 7.41 T:xoodyakround3 9.26 9.28 9.29 ascon128v12 9.27 9.30 9.34 ascon80pqv12 11.07 11.10 11.12 ascon128abi32v12 16.20 16.23 16.24 T:schwaemm256128v2 16.48 16.50 16.52 ascon128bi32v12 18.01 18.06 18.11 T:isapa128v20 21.47 21.52 21.61 T:schwaemm192192v2 22.78 22.97 23.06 T:schwaemm128128v2 23.18 23.21 23.25 romulusn 23.17 23.22 23.26 romulusm 23.41 23.53 23.60 T:isapa128av20 23.83 23.96 24.43 T:schwaemm256256v2 25.01 25.07 25.12 T:grain128aeadv2 31.53 31.58 31.69 T:giftcofb128v1 31.49 32.85 32.87 T:tinyjambu128v2 33.89 33.90 33.93 T:tinyjambu256v2 36.29 36.31 36.33 T:tinyjambu192v2 39.78 39.96 40.17 T:isapk128av20 42.06 42.08 42.11 romulust 49.88 50.10 50.26 T:isapk128v20 88.02 88.49 89.31 T:elephant200v2 96.77 97.61 98.82 T:isapxv20 3153.40 3162.21 3167.33 T:elephant176v2 3682.84 3709.65 3711.25 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.47 0.49 0.49 aes256gcmv1 0.47 0.49 0.49 T:aes128gcmv1 6.13 6.14 6.17 ascon128av12 7.38 7.39 7.42 T:xoodyakround3 9.26 9.28 9.29 ascon128v12 9.28 9.30 9.33 ascon80pqv12 11.05 11.07 11.08 ascon128abi32v12 16.20 16.23 16.24 T:schwaemm256128v2 16.45 16.46 16.47 ascon128bi32v12 17.98 18.02 18.10 T:isapa128v20 21.52 21.53 21.60 T:schwaemm192192v2 22.44 22.97 23.05 T:schwaemm128128v2 23.16 23.18 23.27 romulusm 23.18 23.22 23.26 romulusn 23.52 23.54 23.59 T:isapa128av20 23.81 23.89 24.46 T:schwaemm256256v2 24.98 25.06 25.11 T:grain128aeadv2 31.53 31.60 31.68 T:giftcofb128v1 31.51 32.84 32.87 T:tinyjambu128v2 33.83 33.87 33.90 T:tinyjambu256v2 36.27 36.32 36.35 T:tinyjambu192v2 39.79 39.94 40.14 T:isapk128av20 42.06 42.10 42.14 romulust 49.82 50.07 50.25 T:isapk128v20 87.83 88.18 89.10 T:elephant200v2 95.23 97.66 98.85 T:isapxv20 3155.75 3163.08 3166.43 T:elephant176v2 3685.63 3697.04 3710.32 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.47 0.48 0.49 T:aes128gcmv1 0.48 0.48 0.49 aes256gcmv1 6.12 6.14 6.17 ascon128av12 7.37 7.41 7.43 T:xoodyakround3 9.25 9.28 9.31 ascon128v12 9.28 9.28 9.30 ascon80pqv12 11.06 11.07 11.09 ascon128abi32v12 16.21 16.23 16.25 T:schwaemm256128v2 16.44 16.46 16.48 ascon128bi32v12 17.95 18.03 18.12 T:isapa128v20 21.52 21.59 21.60 T:schwaemm192192v2 22.77 22.97 23.05 T:schwaemm128128v2 23.14 23.20 23.28 romulusm 23.18 23.23 23.26 romulusn 23.50 23.52 23.58 T:isapa128av20 23.83 23.89 24.47 T:schwaemm256256v2 25.01 25.04 25.11 T:grain128aeadv2 31.53 31.57 31.67 T:giftcofb128v1 31.52 32.83 32.87 T:tinyjambu128v2 33.82 33.86 33.89 T:tinyjambu256v2 36.28 36.32 36.34 T:tinyjambu192v2 39.76 40.02 40.15 T:isapk128av20 42.09 42.11 42.17 romulust 49.81 50.10 50.34 T:isapk128v20 87.84 88.40 89.08 T:elephant200v2 94.65 97.54 98.71 T:isapxv20 3158.75 3162.71 3164.77 T:elephant176v2 3685.20 3697.10 3710.85 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.79 0.80 0.80 T:aes128gcmv1 0.86 0.87 0.88 aes256gcmv1 6.38 6.39 6.43 ascon128av12 9.47 9.48 9.49 ascon128v12 9.49 9.51 9.52 ascon80pqv12 10.72 10.76 10.78 T:xoodyakround3 11.59 11.61 11.62 ascon128abi32v12 16.75 16.75 16.77 ascon128bi32v12 16.77 17.25 17.31 T:schwaemm256128v2 21.95 22.08 22.18 T:schwaemm192192v2 23.16 23.23 23.33 T:schwaemm128128v2 24.66 24.67 25.25 T:schwaemm256256v2 25.41 25.44 25.46 T:grain128aeadv2 30.20 30.22 30.27 romulusn 31.40 31.40 31.42 T:isapa128av20 31.82 31.97 32.01 T:giftcofb128v1 39.14 39.15 39.22 T:isapa128v20 41.92 41.96 41.99 romulusm 42.59 42.60 42.62 T:tinyjambu128v2 50.39 50.42 50.45 T:tinyjambu192v2 54.09 54.11 54.13 T:tinyjambu256v2 58.08 58.12 58.28 T:isapk128av20 83.72 83.75 83.80 romulust 114.64 114.80 114.93 T:isapk128v20 135.20 135.53 136.99 T:elephant200v2 212.76 213.75 214.86 T:isapxv20 4814.18 4821.32 4822.77 T:elephant176v2 5600.36 5606.65 5609.21 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.81 0.81 0.82 T:aes128gcmv1 0.93 0.93 0.94 aes256gcmv1 6.38 6.39 6.40 ascon128av12 9.44 9.46 9.48 ascon128v12 9.45 9.47 9.50 ascon80pqv12 10.73 10.75 10.78 T:xoodyakround3 11.53 11.56 11.57 ascon128abi32v12 16.64 16.71 16.88 ascon128bi32v12 16.74 16.76 16.79 T:schwaemm256128v2 22.01 22.07 22.20 T:schwaemm192192v2 23.32 23.34 23.40 T:schwaemm128128v2 24.64 24.67 25.25 T:schwaemm256256v2 25.58 25.61 25.64 T:grain128aeadv2 30.18 30.29 30.32 romulusn 31.40 31.42 31.43 T:isapa128av20 31.75 31.94 31.98 T:giftcofb128v1 39.15 39.19 39.21 T:isapa128v20 41.99 42.03 42.15 romulusm 42.60 42.63 42.71 T:tinyjambu128v2 50.37 50.39 50.40 T:tinyjambu192v2 54.13 54.15 54.20 T:tinyjambu256v2 58.06 58.15 58.26 T:isapk128av20 83.72 83.74 83.75 romulust 114.60 114.71 114.92 T:isapk128v20 135.12 135.55 136.48 T:elephant200v2 213.11 215.47 215.75 T:isapxv20 4812.64 4821.95 4824.47 T:elephant176v2 5598.79 5602.99 5607.28 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.80 0.81 0.81 T:aes128gcmv1 0.92 0.93 0.93 aes256gcmv1 6.38 6.39 6.40 ascon128av12 9.47 9.48 9.50 ascon80pqv12 9.45 9.51 9.51 ascon128v12 10.71 10.73 10.76 T:xoodyakround3 11.54 11.55 11.56 ascon128abi32v12 16.68 16.73 16.89 ascon128bi32v12 16.75 16.75 16.84 T:schwaemm256128v2 22.06 22.07 22.19 T:schwaemm192192v2 23.13 23.33 23.40 T:schwaemm128128v2 24.21 24.24 24.25 T:isapa128v20 24.67 24.69 24.71 T:isapa128av20 24.67 24.70 25.25 T:schwaemm256256v2 25.57 25.59 25.61 T:grain128aeadv2 30.18 30.23 30.32 romulusn 31.89 31.94 31.99 T:giftcofb128v1 41.96 42.00 42.03 romulusm 42.60 42.62 42.69 T:tinyjambu128v2 43.25 43.26 43.29 romulust 45.40 45.44 45.48 T:isapk128av20 50.36 50.40 50.44 T:tinyjambu192v2 54.11 54.14 54.19 T:tinyjambu256v2 76.35 76.43 76.59 T:isapk128v20 134.96 135.42 136.33 T:elephant200v2 138.89 140.13 140.48 T:isapxv20 4821.63 4823.19 4825.87 T:elephant176v2 5600.07 5603.78 5608.10 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.47 4.55 4.60 T:aes128gcmv1 4.88 4.97 5.16 aes256gcmv1 9.62 9.81 10.21 ascon128av12 12.60 12.77 13.10 ascon128v12 12.51 12.80 13.21 ascon80pqv12 15.46 15.55 16.07 T:xoodyakround3 19.07 19.14 19.77 ascon128abi32v12 23.13 23.21 23.60 ascon128bi32v12 27.34 27.55 27.74 T:schwaemm256128v2 29.78 29.88 30.22 T:schwaemm128128v2 32.43 32.52 32.65 T:grain128aeadv2 35.33 35.77 36.27 T:schwaemm192192v2 38.42 38.59 38.91 T:giftcofb128v1 39.02 39.39 39.64 T:schwaemm256256v2 41.05 41.12 41.23 romulusn 49.98 50.06 50.30 T:tinyjambu128v2 54.17 54.47 54.67 romulusm 58.95 59.18 59.27 T:tinyjambu192v2 62.61 62.74 62.92 T:tinyjambu256v2 76.66 77.27 77.64 T:isapa128av20 111.86 111.99 112.66 romulust 191.34 192.01 193.57 T:elephant200v2 230.17 231.13 232.11 T:isapk128av20 322.31 322.59 322.97 T:isapa128v20 1245.52 1246.33 1248.23 T:isapk128v20 2083.42 2088.09 2094.67 T:isapxv20 5995.32 5998.19 6000.77 T:elephant176v2 7486.50 7512.16 7530.12 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.43 4.48 4.58 T:aes128gcmv1 4.93 5.04 5.09 aes256gcmv1 9.75 9.86 10.12 ascon128av12 12.45 12.79 13.13 ascon128v12 12.62 12.92 13.17 ascon80pqv12 15.55 15.75 16.43 T:xoodyakround3 18.92 19.04 19.19 ascon128abi32v12 23.13 23.37 23.59 ascon128bi32v12 27.35 27.52 27.60 T:schwaemm256128v2 29.86 30.08 30.22 T:schwaemm128128v2 32.65 32.74 32.80 T:grain128aeadv2 35.45 35.57 35.69 T:schwaemm192192v2 38.83 38.88 39.02 T:giftcofb128v1 38.84 39.11 39.49 T:schwaemm256256v2 41.07 41.16 41.34 romulusn 50.02 50.12 50.20 T:tinyjambu128v2 55.88 56.11 56.47 romulusm 58.99 59.10 59.21 T:tinyjambu192v2 62.62 62.81 62.91 T:tinyjambu256v2 76.66 76.89 76.96 T:isapa128av20 111.68 111.80 112.01 romulust 191.02 191.31 193.34 T:elephant200v2 227.45 232.16 232.59 T:isapk128av20 322.55 322.88 323.27 T:isapa128v20 1246.43 1247.63 1248.83 T:isapk128v20 2083.12 2128.91 2130.19 T:isapxv20 5995.77 5999.53 6003.08 T:elephant176v2 7466.66 7511.79 7531.66 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.37 4.40 4.43 T:aes128gcmv1 4.86 4.92 5.04 aes256gcmv1 9.72 9.87 9.95 ascon128av12 12.43 12.52 12.64 ascon128v12 12.57 12.68 12.87 ascon80pqv12 15.64 16.01 16.14 T:xoodyakround3 18.88 18.94 19.02 ascon128abi32v12 23.03 23.09 23.30 ascon128bi32v12 27.31 27.36 27.38 T:schwaemm256128v2 29.83 29.86 29.89 T:schwaemm128128v2 32.66 32.73 32.93 T:grain128aeadv2 35.08 35.16 35.42 T:schwaemm192192v2 38.75 38.91 39.09 T:giftcofb128v1 38.81 38.96 39.44 T:schwaemm256256v2 41.02 41.14 41.21 romulusn 49.92 49.98 50.16 T:tinyjambu128v2 50.48 50.67 50.70 T:isapa128av20 55.88 55.91 56.05 romulusm 58.83 58.92 59.05 T:tinyjambu192v2 62.56 62.61 62.65 T:tinyjambu256v2 70.43 70.61 71.21 romulust 153.98 157.02 157.71 T:isapk128av20 168.05 168.51 168.96 T:isapa128v20 191.02 191.48 193.44 T:elephant200v2 671.27 672.95 677.30 T:isapk128v20 1089.80 1102.79 1108.98 T:isapxv20 5991.80 5998.62 6003.31 T:elephant176v2 7469.52 7513.79 7530.72 T:elephant160v2