VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 23.57? 24.83? 41.03? ascon80pqv12 24.46? 26.07? 42.57? ascon128v12 15.97? 27.12? 28.07? ascon128av12 32.24? 34.15? 56.53? ascon128abi32v12 48.67? 51.36? 84.60? ascon128bi32v12 49.92 51.40 52.02 T:aes256gcmv1 52.66 52.66 52.66 T:schwaemm256128v2 63.91 64.62 65.35 T:aes128gcmv1 64.76? 68.99? 114.68? T:schwaemm192192v2 71.78? 76.43? 126.92? T:schwaemm256256v2 48.03? 79.01? 82.04? T:xoodyakround3 60.94? 98.48? 190.95? T:isapa128v20 64.07? 108.62? 112.40? T:giftcofb128v1 110.94? 116.33? 191.32? T:grain128aeadv2 70.23? 118.27? 121.94? T:schwaemm128128v2 138.93? 145.75? 240.10? romulusn 89.54? 158.00? 167.20? T:isapa128av20 161.22? 168.92? 277.95? T:tinyjambu192v2 171.84? 180.01? 296.16? T:tinyjambu256v2 164.32? 201.31? 201.39? T:isapk128av20 130.90? 219.52? 225.86? T:tinyjambu128v2 85.23? 261.90? 589.51? T:isapk128v20 231.46? 384.42? 395.17? romulusm 374.49? 397.50? 656.27? T:elephant200v2 468.78? 786.21? 810.63? T!!!romulust 285.85? 993.22? 1003.75? T:isapxv20 23377.46? 24614.97? 40626.81? T:elephant160v2 23632.33? 38928.58? 38938.95? T:elephant176v2 43116.40? 43133.21? 74970.24? aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 23.48? 24.76? 40.90? ascon80pqv12 24.17? 25.48? 42.06? ascon128v12 15.91? 27.00? 27.95? ascon128av12 30.88? 32.73? 54.23? ascon128abi32v12 50.96 51.44 53.24 T:aes256gcmv1 48.88? 51.47? 84.98? ascon128bi32v12 52.66 52.66 52.71 T:schwaemm256128v2 64.74 65.07 65.62 T:aes128gcmv1 64.74? 69.03? 114.74? T:schwaemm192192v2 71.74? 76.42? 126.83? T:schwaemm256256v2 45.79? 78.01? 81.01? T:xoodyakround3 60.93? 96.88? 190.97? T:isapa128v20 65.95? 108.75? 112.58? T:giftcofb128v1 70.91? 118.15? 121.79? T:schwaemm128128v2 115.15? 120.72? 198.49? T:grain128aeadv2 138.83? 145.72? 239.98? romulusn 89.54? 158.01? 167.21? T:isapa128av20 161.06? 168.91? 277.71? T:tinyjambu192v2 171.83? 180.04? 296.18? T:tinyjambu256v2 164.31? 201.33? 201.37? T:isapk128av20 130.88? 219.52? 225.84? T:tinyjambu128v2 85.33? 260.34? 589.32? T:isapk128v20 231.50? 384.14? 394.73? romulusm 374.50? 397.67? 656.20? T:elephant200v2 468.86? 786.17? 810.86? T!!!romulust 285.93? 995.92? 1003.35? T:isapxv20 23368.75? 24604.02? 40624.18? T:elephant160v2 23626.22? 38923.69? 38943.08? T:elephant176v2 43122.65? 43143.00? 74976.08? aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 23.49? 24.76? 40.91? ascon80pqv12 24.17? 25.47? 42.07? ascon128v12 15.91? 27.02? 27.97? ascon128av12 30.90? 32.74? 54.25? ascon128abi32v12 30.37? 48.59? 95.99? T:isapa128v20 50.61 51.22 51.62 T:aes256gcmv1 48.89? 51.49? 85.01? ascon128bi32v12 52.66 52.66 52.71 T:schwaemm256128v2 64.72 64.95 65.24 T:aes128gcmv1 64.74? 69.03? 114.74? T:schwaemm192192v2 71.76? 76.42? 126.83? T:schwaemm256256v2 46.02? 78.45? 81.45? T:xoodyakround3 60.91? 106.50? 112.16? T:isapa128av20 64.16? 108.77? 112.59? T:giftcofb128v1 70.16? 118.14? 121.81? T:schwaemm128128v2 115.15? 120.64? 198.50? T:grain128aeadv2 108.28? 133.12? 133.47? T:isapk128av20 138.84? 145.76? 240.00? romulusn 68.29? 161.95? 352.74? T:isapk128v20 161.06? 169.51? 277.71? T:tinyjambu192v2 171.82? 180.00? 296.18? T:tinyjambu256v2 130.90? 219.52? 225.86? T:tinyjambu128v2 160.08? 274.37? 285.79? T!!!romulust 229.15? 384.17? 395.19? romulusm 374.50? 397.64? 656.19? T:elephant200v2 466.01? 473.84? 2014.44? aes256gcmv1 200.34? 600.65? 604.83? T:isapxv20 23372.13? 24610.96? 40637.34? T:elephant160v2 23614.59? 38933.80? 38947.66? T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 23.58? 25.33? 40.79? ascon80pqv12 24.36? 25.55? 42.08? ascon128v12 15.97? 26.94? 27.81? ascon128av12 28.50? 32.46? 55.66? T:aes256gcmv1 31.60? 33.27? 54.93? ascon128abi32v12 42.58 43.18 44.60 T:aes128gcmv1 48.87? 51.25? 84.38? ascon128bi32v12 52.38? 52.41? 86.63? T:schwaemm256128v2 35.99? 60.58? 62.47? T:xoodyakround3 64.37? 64.40? 110.99? T:giftcofb128v1 64.82 68.65 68.67 T:schwaemm192192v2 53.73? 74.92? 135.19? T:isapa128v20 72.00? 76.04? 125.70? T:schwaemm256256v2 76.71? 76.75? 138.19? T:isapa128av20 109.75? 115.01? 189.00? T:grain128aeadv2 70.20? 117.77? 121.15? T:schwaemm128128v2 125.90 131.63 131.66 T:tinyjambu192v2 129.27? 135.71? 222.14? T:tinyjambu256v2 167.07? 167.09? 289.27? T:isapk128av20 160.20? 168.03? 275.18? romulusm 106.09? 177.51? 182.37? T:tinyjambu128v2 115.76? 197.75? 197.77? romulusn 282.33? 297.71? 490.32? T:elephant200v2 315.47? 316.34? 545.57? T!!!romulust 322.46? 325.33? 974.48? T:isapxv20 123.58? 428.41? 431.01? T:isapk128v20 22018.41 23176.34 23181.64 aes256gcmv1 16838.56? 29045.64? 29054.48? T:elephant176v2 18462.48? 30427.50? 30435.69? T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 23.71? 25.12? 40.99? ascon80pqv12 24.19? 25.53? 41.83? ascon128v12 15.90? 26.82? 27.67? ascon128av12 27.93? 32.51? 55.51? T:aes256gcmv1 31.04? 33.00? 53.98? ascon128abi32v12 42.93 43.25 43.37 T:aes128gcmv1 48.96? 51.97? 84.59? ascon128bi32v12 52.38? 52.41? 86.67? T:schwaemm256128v2 35.86? 60.07? 61.82? T:xoodyakround3 64.42? 65.52? 111.04? T:giftcofb128v1 64.82 68.66 68.67 T:schwaemm192192v2 53.72? 72.64? 135.19? T:isapa128v20 72.02? 76.10? 125.67? T:schwaemm256256v2 76.71? 76.75? 138.19? T:isapa128av20 112.14? 117.16? 192.55? T:grain128aeadv2 70.97? 117.70? 121.09? T:schwaemm128128v2 126.13 131.86 131.96 T:tinyjambu192v2 129.27? 135.18? 222.17? T:tinyjambu256v2 167.03? 167.36? 289.25? T:isapk128av20 160.00? 167.96? 275.16? romulusm 106.85? 177.79? 182.63? T:tinyjambu128v2 114.89? 197.68? 197.75? romulusn 282.36? 297.85? 490.30? T:elephant200v2 315.45? 316.47? 545.56? T!!!romulust 321.25? 325.78? 973.20? T:isapxv20 119.99? 428.45? 429.61? T:isapk128v20 16830.89? 17644.44? 29053.50? T:elephant176v2 22021.61 23175.50 23183.12 aes256gcmv1 18455.53? 30429.32? 30447.65? T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 23.72? 25.21? 41.00? ascon80pqv12 24.21? 25.39? 41.84? ascon128v12 15.88? 26.82? 27.67? ascon128av12 28.40? 32.57? 55.45? T:aes256gcmv1 31.05? 32.70? 54.00? ascon128abi32v12 43.03 43.26 43.49 T:aes128gcmv1 38.45? 48.81? 87.73? T:isapa128v20 48.99? 51.38? 84.60? ascon128bi32v12 52.39? 52.41? 86.68? T:schwaemm256128v2 35.85? 60.29? 62.17? T:xoodyakround3 62.39? 62.42? 110.66? T:isapa128av20 64.42? 64.43? 111.08? T:giftcofb128v1 64.82 68.65 68.66 T:schwaemm192192v2 72.01? 76.04? 125.66? T:schwaemm256256v2 112.18? 117.65? 192.57? T:grain128aeadv2 70.17? 117.71? 121.13? T:schwaemm128128v2 126.13 131.88 131.89 T:tinyjambu192v2 132.93? 133.19? 228.54? T:isapk128av20 129.26? 135.16? 222.15? T:tinyjambu256v2 162.10? 162.77? 283.17? T!!!romulust 160.02? 167.65? 275.18? romulusm 106.25? 177.76? 182.64? T:tinyjambu128v2 114.89? 197.70? 197.75? romulusn 281.31? 284.38? 695.61? T:isapxv20 282.36? 297.84? 490.31? T:elephant200v2 111.43? 310.01? 310.09? T:isapk128v20 693.86? 956.78? 958.68? aes256gcmv1 16830.59? 17643.31? 29047.77? T:elephant176v2 18449.14? 30427.17? 30430.47? T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 13.54 13.92 14.11 T:aes256gcmv1 20.87 21.06 21.39 T:aes128gcmv1 23.35? 24.68? 40.84? ascon80pqv12 23.95? 25.30? 41.86? ascon128v12 15.65? 26.75? 27.78? ascon128av12 30.39? 32.38? 53.82? ascon128abi32v12 24.46? 42.14? 44.01? T:xoodyakround3 30.21? 48.43? 95.72? T:isapa128v20 48.53? 51.22? 84.72? ascon128bi32v12 52.09 52.11 52.14 T:schwaemm256128v2 64.06? 68.29? 117.39? T:schwaemm192192v2 71.07? 75.71? 125.67? T:schwaemm256256v2 85.74? 90.33? 149.07? T:tinyjambu256v2 89.66? 94.39? 155.73? T:tinyjambu192v2 89.18? 94.70? 157.14? romulusn 89.83? 94.74? 156.31? romulusm 60.93? 106.51? 112.15? T:isapa128av20 63.57? 107.19? 110.63? T:giftcofb128v1 108.48? 114.19? 187.36? T:grain128aeadv2 69.64? 117.25? 120.90? T:schwaemm128128v2 132.78 132.82 132.86 T:isapk128av20 80.51? 135.50? 139.72? T:tinyjambu128v2 68.30? 161.96? 352.64? T:isapk128v20 187.29? 199.70? 332.03? T:elephant200v2 159.27? 273.64? 286.75? T!!!romulust 208.22? 600.86? 777.20? T:isapxv20 476.35? 2020.93? 2024.79? aes256gcmv1 11522.34? 11539.16? 20457.07? T:elephant160v2 10946.45 11667.17 11676.94 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 13.42 13.62 13.87 T:aes256gcmv1 20.69 21.26 21.69 T:aes128gcmv1 23.64? 25.12? 41.35? ascon80pqv12 23.94? 25.37? 41.86? ascon128v12 15.59? 26.64? 27.64? ascon128av12 30.63? 32.65? 54.27? ascon128abi32v12 24.48? 42.13? 44.04? T:xoodyakround3 30.21? 48.44? 95.75? T:isapa128v20 48.52? 51.23? 84.73? ascon128bi32v12 52.10 52.13 52.14 T:schwaemm256128v2 64.05? 68.29? 117.39? T:schwaemm192192v2 71.07? 75.69? 125.67? T:schwaemm256256v2 85.72? 90.33? 149.09? T:tinyjambu256v2 89.66? 94.40? 155.73? T:tinyjambu192v2 89.60? 94.70? 156.59? romulusm 89.19? 94.73? 157.15? romulusn 60.91? 106.48? 112.14? T:isapa128av20 63.58? 107.21? 110.68? T:giftcofb128v1 108.46? 113.76? 187.35? T:grain128aeadv2 70.27? 117.25? 120.90? T:schwaemm128128v2 132.77 132.84 132.86 T:isapk128av20 81.26? 136.00? 140.25? T:tinyjambu128v2 68.29? 161.89? 352.73? T:isapk128v20 187.33? 200.76? 332.08? T:elephant200v2 157.78? 273.64? 286.74? T!!!romulust 200.53? 600.85? 786.03? T:isapxv20 474.26? 2019.46? 2021.50? aes256gcmv1 11520.02? 11535.53? 20452.23? T:elephant160v2 10946.37 11667.28 11680.83 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 13.29 13.50 13.86 T:aes256gcmv1 20.64 21.27 22.16 T:aes128gcmv1 23.66? 25.00? 41.37? ascon80pqv12 23.96? 25.31? 41.89? ascon128v12 15.63? 26.64? 27.66? ascon128av12 30.64? 32.67? 54.29? ascon128abi32v12 24.48? 42.14? 44.04? T:xoodyakround3 30.23? 48.44? 95.74? T:isapa128v20 48.54? 51.25? 84.75? ascon128bi32v12 52.10 52.11 52.14 T:schwaemm256128v2 64.05? 68.29? 115.07? T:schwaemm192192v2 71.09? 75.70? 125.67? T:schwaemm256256v2 85.72? 90.32? 149.09? T:tinyjambu256v2 89.66? 94.38? 155.72? T:tinyjambu192v2 89.58? 94.73? 156.60? romulusm 89.19? 94.74? 157.16? romulusn 61.65? 106.50? 112.15? T:isapa128av20 63.59? 107.21? 110.69? T:giftcofb128v1 108.49? 113.79? 187.38? T:grain128aeadv2 69.64? 117.25? 120.89? T:schwaemm128128v2 132.81 132.82 132.84 T:isapk128av20 80.77? 136.00? 140.24? T:tinyjambu128v2 68.24? 161.89? 352.75? T:isapk128v20 187.32? 199.76? 332.07? T:elephant200v2 160.91? 273.65? 284.99? T!!!romulust 200.41? 600.94? 778.94? T:isapxv20 475.85? 2019.44? 2022.41? aes256gcmv1 11527.06? 11538.56? 20447.54? T:elephant160v2 10946.29 11667.07 11675.39 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 25.16? 25.18? 40.25? ascon80pqv12 25.94? 25.96? 41.49? ascon128v12 17.27? 27.59? 27.63? ascon128av12 34.03? 34.05? 54.45? ascon128abi32v12 38.67? 38.99? 61.45? T:aes256gcmv1 51.42 51.49 51.76 T:aes128gcmv1 51.98? 51.99? 83.16? ascon128bi32v12 53.93 53.94 53.95 T:schwaemm256128v2 38.31? 61.24? 61.25? T:xoodyakround3 68.28? 68.29? 109.21? T:giftcofb128v1 70.19 70.20 70.36 T:schwaemm192192v2 78.11? 78.12? 125.10? T:schwaemm256256v2 88.18? 88.22? 141.07? T:isapa128av20 106.10? 106.13? 169.74? T:isapa128v20 115.47? 115.80? 184.73? T:grain128aeadv2 74.57? 119.28? 120.79? T:schwaemm128128v2 132.66 132.68 132.69 T:tinyjambu192v2 136.19? 136.45? 217.89? T:tinyjambu256v2 168.64? 168.86? 269.77? romulusm 111.86? 178.92? 178.98? T:tinyjambu128v2 121.42? 194.20? 194.22? romulusn 199.32 199.34 199.85 T:isapk128av20 303.45? 304.15? 485.50? T:elephant200v2 384.00? 385.33? 614.41? T:isapk128v20 337.24? 538.05? 538.15? T!!!romulust 828.59 829.14 832.31 T:isapxv20 17772.30? 17778.85? 28458.24? T:elephant176v2 18658.26? 18665.33? 29874.29? T:elephant160v2 23645.99? 23651.91? 37860.13? aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 25.28? 25.57? 40.43? ascon80pqv12 25.79? 25.81? 41.26? ascon128v12 17.18? 27.47? 27.47? ascon128av12 33.47? 33.78? 53.54? ascon128abi32v12 38.84? 38.93? 61.16? T:aes256gcmv1 51.75 51.93 52.09 T:aes128gcmv1 52.10? 52.12? 83.35? ascon128bi32v12 53.92 53.94 53.99 T:schwaemm256128v2 38.29? 60.76? 60.81? T:xoodyakround3 68.34? 68.37? 109.30? T:giftcofb128v1 70.19 70.20 70.20 T:schwaemm192192v2 78.12? 78.14? 124.96? T:schwaemm256256v2 88.18? 88.20? 141.08? T:isapa128av20 106.10? 106.18? 169.74? T:isapa128v20 117.96? 117.97? 188.72? T:grain128aeadv2 75.11? 119.21? 120.72? T:schwaemm128128v2 132.90 132.92 132.95 T:tinyjambu192v2 136.23? 136.26? 217.96? T:tinyjambu256v2 168.84? 169.18? 270.11? romulusm 113.29? 179.23? 179.28? T:tinyjambu128v2 121.38? 194.18? 194.19? romulusn 199.33 199.61 199.67 T:isapk128av20 303.46? 304.25? 485.49? T:elephant200v2 384.07? 385.76? 614.44? T:isapk128v20 337.38? 538.01? 538.09? T!!!romulust 827.53 828.87 831.08 T:isapxv20 17770.55? 17776.77? 28457.64? T:elephant176v2 18656.69 18660.27 18665.55 T:elephant160v2 23642.41? 23646.78? 37860.20? aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 25.79? 25.79? 41.26? ascon128v12 25.55? 25.99? 40.43? ascon80pqv12 17.18? 27.47? 27.47? ascon128av12 33.51? 33.84? 53.53? ascon128abi32v12 38.64? 39.43? 61.05? T:aes256gcmv1 51.75 51.84 51.99 T:aes128gcmv1 52.10? 52.10? 83.35? ascon128bi32v12 53.91 53.95 53.99 T:schwaemm256128v2 38.19? 60.97? 61.00? T:xoodyakround3 65.51? 65.53? 104.81? T:isapa128v20 68.34? 68.39? 109.30? T:giftcofb128v1 69.71? 69.72? 111.52? T:isapa128av20 70.18 70.19 70.20 T:schwaemm192192v2 78.11? 78.12? 124.94? T:schwaemm256256v2 117.96? 118.01? 188.72? T:grain128aeadv2 74.53? 119.21? 120.72? T:schwaemm128128v2 132.90 132.90 132.96 T:tinyjambu192v2 136.20? 136.20? 217.91? T:tinyjambu256v2 155.21 155.23 155.24 T:isapk128av20 168.82? 169.59? 270.09? romulusm 112.01? 179.18? 179.19? T:tinyjambu128v2 121.45? 194.18? 194.19? romulusn 255.09? 255.16? 408.13? T:isapk128v20 176.95? 281.74? 281.76? T!!!romulust 303.45? 304.31? 485.49? T:elephant200v2 543.88 545.13 545.63 T:isapxv20 1421.42? 1424.50? 2279.46? aes256gcmv1 18655.39 18657.82 18661.78 T:elephant160v2 17773.99? 25495.56? 28456.16? T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 34.40? 35.06? 54.84? ascon80pqv12 34.85? 35.40? 55.48? ascon128v12 27.42? 42.75? 43.23? ascon128av12 51.91? 52.13? 81.79? ascon128abi32v12 68.62? 68.95? 109.55? ascon128bi32v12 88.80 89.18 89.32 T:schwaemm256128v2 58.86? 92.15? 93.52? T:xoodyakround3 114.11? 114.12? 182.36? T:schwaemm192192v2 125.02? 125.66? 200.39? T:schwaemm256256v2 132.63? 133.00? 211.23? T:grain128aeadv2 88.13? 139.16? 140.16? T:giftcofb128v1 147.10? 147.73? 235.09? romulusn 97.23? 154.30? 154.82? T:schwaemm128128v2 155.86? 156.30? 249.12? T:tinyjambu192v2 159.87? 160.42? 255.50? T:tinyjambu256v2 183.20? 192.89? 294.87? T:aes256gcmv1 195.09? 196.27? 311.45? romulusm 132.66? 211.34? 211.78? T:tinyjambu128v2 253.31 254.34 261.62 T:aes128gcmv1 215.98? 343.78? 344.67? T:isapa128av20 430.25? 431.02? 687.79? T:elephant200v2 455.44? 725.79? 727.27? T!!!romulust 875.38? 875.82? 1399.88? T:isapa128v20 905.58 905.84 906.36 T:isapk128av20 4326.36? 4328.51? 6921.09? T:isapk128v20 8346.20? 13285.34? 13304.60? T:isapxv20 22092.77 22122.91 22181.31 T:elephant176v2 24942.36? 25061.04? 39910.05? T:elephant160v2 34430.74? 34436.53? 55080.52? aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 34.44? 34.77? 54.70? ascon80pqv12 35.33? 35.62? 56.26? ascon128v12 27.50? 43.05? 43.53? ascon128av12 51.14? 51.36? 81.72? ascon128abi32v12 69.05? 69.43? 109.99? ascon128bi32v12 88.84 88.88 89.02 T:schwaemm256128v2 57.59? 91.36? 91.81? T:xoodyakround3 114.41? 114.63? 182.77? T:schwaemm192192v2 125.13? 125.51? 200.57? T:schwaemm256256v2 134.70? 135.30? 215.09? T:grain128aeadv2 87.84? 139.16? 139.42? T:giftcofb128v1 147.99? 148.81? 235.68? romulusn 96.38? 153.71? 153.74? T:schwaemm128128v2 156.20? 156.64? 249.63? T:tinyjambu192v2 160.42? 160.87? 256.39? T:tinyjambu256v2 187.59? 191.41? 296.70? T:aes256gcmv1 201.95? 203.10? 322.70? romulusm 133.00? 212.01? 212.56? T:tinyjambu128v2 249.74 251.67 254.27 T:aes128gcmv1 214.79? 343.08? 343.56? T:isapa128av20 430.17? 430.32? 687.82? T:elephant200v2 453.55? 723.85? 726.20? T!!!romulust 875.04? 875.30? 1399.50? T:isapa128v20 905.58 906.10 906.44 T:isapk128av20 4326.91? 4327.51? 6922.16? T:isapk128v20 8317.36? 13285.53? 13288.12? T:isapxv20 22092.62 22118.82 22182.46 T:elephant176v2 24942.14? 25029.50? 40025.76? T:elephant160v2 34431.41? 34474.31? 55081.23? aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 34.40? 34.55? 54.40? ascon80pqv12 35.00? 35.18? 55.59? ascon128v12 27.05? 42.38? 42.79? ascon128av12 50.73? 51.13? 80.94? ascon128abi32v12 68.58? 68.58? 109.47? ascon128bi32v12 88.69 88.70 88.88 T:schwaemm256128v2 57.97? 91.70? 92.15? T:xoodyakround3 114.41? 114.63? 182.77? T:schwaemm192192v2 125.13? 125.13? 200.20? T:schwaemm256256v2 134.60? 134.66? 215.05? T:grain128aeadv2 87.21? 139.16? 139.16? T:giftcofb128v1 147.62? 147.99? 235.61? romulusn 96.38? 153.71? 153.74? T:schwaemm128128v2 156.20? 156.23? 249.60? T:tinyjambu192v2 160.27? 160.28? 256.16? T:tinyjambu256v2 183.05? 188.92? 299.06? T:aes256gcmv1 201.40? 201.54? 321.96? romulusm 132.67? 212.04? 212.05? T:tinyjambu128v2 142.27? 226.70? 227.04? T:isapa128av20 251.75 252.57 255.35 T:aes128gcmv1 430.17? 430.28? 687.83? T:elephant200v2 456.22? 457.15? 729.38? T:isapa128v20 288.27? 459.38? 460.63? T!!!romulust 638.98 639.10 639.21 T:isapk128av20 2364.16? 2364.50? 3782.11? T:isapk128v20 4344.32? 6950.03? 6953.26? T:isapxv20 12163.53? 12255.74? 19461.79? aes256gcmv1 22092.62 22095.78 22190.78 T:elephant176v2 24942.55? 25027.08? 39943.79? T:elephant160v2