VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.45 1.47 1.48 T:aes128gcmv1 1.63 1.65 1.66 aes256gcmv1 10.76 10.76 10.78 ascon128av12 15.14 15.15 15.25 ascon80pqv12 15.32 15.35 15.36 ascon128v12 20.15 20.22 20.43 ascon128abi32v12 21.62 21.72 21.91 T:xoodyakround3 22.08 22.12 22.18 T:schwaemm256128v2 29.26 29.37 29.39 T:schwaemm192192v2 29.91 30.28 30.31 ascon128bi32v12 32.41 32.43 32.45 T:schwaemm256256v2 33.37 33.41 33.43 T:schwaemm128128v2 38.89 38.92 38.98 T:grain128aeadv2 47.46 47.49 47.53 romulusn 48.05 48.13 48.24 T:giftcofb128v1 61.10 61.71 62.37 T:isapa128av20 68.05 68.13 68.23 T:isapa128v20 76.02 76.15 76.25 T:tinyjambu128v2 75.83 76.79 77.05 romulusm 95.38 95.48 95.61 T:tinyjambu192v2 104.00 104.03 104.10 T:tinyjambu256v2 106.05 106.77 106.82 T:isapk128av20 138.90 142.32 144.41 T:isapk128v20 150.31 150.47 150.60 T!!!romulust 197.32 200.12 200.35 T:elephant200v2 211.58 212.24 213.04 T:isapxv20 10388.11 10392.26 10398.65 T:elephant176v2 11797.66 11802.00 11812.20 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.46 1.47 1.49 T:aes128gcmv1 1.71 1.72 1.73 aes256gcmv1 10.25 10.27 10.31 ascon128av12 15.15 15.16 15.19 ascon128v12 15.36 15.37 15.47 ascon80pqv12 20.18 20.21 20.29 ascon128abi32v12 20.67 20.74 20.79 T:xoodyakround3 22.12 22.14 22.17 T:schwaemm256128v2 29.23 29.37 29.41 T:schwaemm192192v2 29.96 30.40 30.43 ascon128bi32v12 32.39 32.41 32.42 T:schwaemm256256v2 33.36 33.42 33.48 T:schwaemm128128v2 39.40 39.41 39.53 T:grain128aeadv2 44.62 45.09 46.37 romulusn 47.87 47.98 48.40 T:giftcofb128v1 61.34 62.10 62.26 T:isapa128av20 67.88 68.18 68.79 T:isapa128v20 75.32 75.57 76.24 romulusm 76.47 76.50 76.56 T:tinyjambu128v2 95.04 95.25 95.36 T:tinyjambu192v2 104.23 104.28 104.40 T:tinyjambu256v2 106.68 106.78 106.82 T:isapk128av20 138.91 141.86 144.34 T:isapk128v20 150.30 150.48 151.11 T!!!romulust 197.14 197.56 198.54 T:elephant200v2 212.26 212.64 213.13 T:isapxv20 10389.80 10391.66 10402.89 T:elephant176v2 11795.81 11802.44 11805.76 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.45 1.46 1.47 T:aes128gcmv1 1.70 1.72 1.72 aes256gcmv1 10.25 10.27 10.28 ascon128av12 15.18 15.19 15.21 ascon128v12 15.37 15.38 15.46 ascon80pqv12 20.04 20.21 20.40 ascon128abi32v12 20.71 20.83 20.85 T:xoodyakround3 22.13 22.16 22.17 T:schwaemm256128v2 29.25 29.38 29.41 T:schwaemm192192v2 29.96 30.22 30.42 ascon128bi32v12 32.38 32.42 32.45 T:schwaemm256256v2 33.34 33.41 33.44 T:schwaemm128128v2 34.18 34.31 34.53 T:isapa128v20 39.41 39.42 39.51 T:grain128aeadv2 40.44 41.01 41.17 T:isapa128av20 45.01 45.33 47.33 romulusn 48.01 48.27 48.38 T:giftcofb128v1 52.80 52.88 52.93 T!!!romulust 70.68 70.72 70.77 T:isapk128av20 74.75 75.78 76.11 romulusm 76.41 76.46 76.49 T:tinyjambu128v2 85.78 89.09 91.04 T:isapk128v20 95.02 95.26 95.35 T:tinyjambu192v2 104.26 104.30 104.39 T:tinyjambu256v2 126.24 126.47 126.85 T:isapxv20 196.86 197.12 197.76 T:elephant200v2 10391.21 10393.96 10396.07 T:elephant176v2 11788.76 11799.44 11807.59 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.99 1.00 1.00 T:aes128gcmv1 1.08 1.10 1.11 aes256gcmv1 10.40 10.42 10.43 ascon128av12 14.99 15.06 15.15 ascon80pqv12 15.07 15.08 15.17 ascon128v12 15.49 15.54 15.57 T:xoodyakround3 20.41 20.46 20.49 ascon128abi32v12 21.99 22.01 22.04 T:schwaemm256128v2 29.16 29.22 29.23 T:schwaemm192192v2 30.07 30.17 30.32 ascon128bi32v12 32.22 32.25 32.28 T:schwaemm256256v2 33.24 33.35 33.50 T:schwaemm128128v2 38.44 38.49 38.65 romulusn 38.84 38.89 38.92 T:grain128aeadv2 47.97 48.07 48.15 T:giftcofb128v1 50.98 51.01 51.09 T:isapa128v20 50.97 51.07 51.12 T:isapa128av20 52.62 53.07 53.22 romulusm 62.10 62.26 62.32 T:tinyjambu128v2 74.61 74.65 74.71 T:tinyjambu192v2 78.53 78.56 78.65 T:tinyjambu256v2 88.74 88.78 88.98 T:isapk128av20 101.49 101.55 101.77 T!!!romulust 114.69 116.53 117.45 T:isapk128v20 148.49 149.39 149.44 T:elephant200v2 168.97 169.22 169.60 T:isapxv20 7758.00 7763.88 7765.92 T:elephant176v2 8847.36 8849.80 8854.05 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.99 1.00 1.02 T:aes128gcmv1 1.12 1.14 1.14 aes256gcmv1 10.28 10.29 10.30 ascon128av12 14.94 15.02 15.16 ascon80pqv12 14.94 15.03 15.04 ascon128v12 15.33 15.39 15.42 T:xoodyakround3 20.37 20.46 20.56 ascon128abi32v12 21.97 22.00 22.02 T:schwaemm256128v2 29.19 29.21 29.23 T:schwaemm192192v2 30.14 30.25 30.41 ascon128bi32v12 32.19 32.23 32.29 T:schwaemm256256v2 33.35 33.36 33.40 T:schwaemm128128v2 37.39 37.67 37.90 romulusn 39.13 39.18 39.19 T:grain128aeadv2 47.97 48.07 48.14 T:giftcofb128v1 50.93 51.09 51.24 T:isapa128v20 51.21 51.31 51.74 T:isapa128av20 52.20 52.38 52.70 romulusm 62.41 62.46 62.49 T:tinyjambu128v2 74.43 74.54 74.62 T:tinyjambu192v2 78.68 78.70 78.75 T:tinyjambu256v2 88.56 88.80 89.61 T:isapk128av20 101.45 101.54 101.96 T!!!romulust 114.85 116.30 117.34 T:isapk128v20 149.16 149.23 149.83 T:elephant200v2 169.37 169.71 169.92 T:isapxv20 7760.58 7763.26 7765.04 T:elephant176v2 8846.82 8849.92 8852.96 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.00 1.01 1.01 T:aes128gcmv1 1.13 1.13 1.14 aes256gcmv1 10.28 10.29 10.30 ascon128av12 14.94 14.94 14.95 ascon128v12 14.98 15.05 15.18 ascon80pqv12 15.38 15.41 15.44 T:xoodyakround3 20.39 20.46 20.47 ascon128abi32v12 21.97 22.00 22.04 T:schwaemm256128v2 29.16 29.19 29.23 T:schwaemm192192v2 30.04 30.26 30.42 ascon128bi32v12 32.20 32.24 32.27 T:schwaemm256256v2 33.36 33.41 33.49 T:schwaemm128128v2 34.11 34.19 34.88 T:isapa128v20 37.27 37.66 37.81 romulusn 39.14 39.19 39.20 T:grain128aeadv2 40.78 40.87 41.12 T:isapa128av20 47.96 48.04 48.16 T:giftcofb128v1 52.32 52.38 52.69 romulusm 52.67 52.69 52.72 T!!!romulust 62.40 62.44 62.50 T:tinyjambu128v2 70.72 70.77 70.98 T:isapk128av20 74.45 74.56 74.67 T:tinyjambu192v2 78.69 78.74 78.79 T:tinyjambu256v2 88.11 89.80 90.84 T:isapk128v20 126.27 126.47 126.69 T:isapxv20 148.35 148.44 149.20 T:elephant200v2 7760.95 7762.88 7764.86 T:elephant176v2 8846.35 8851.49 8852.53 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.54 0.56 0.57 T:aes128gcmv1 0.54 0.56 0.58 aes256gcmv1 9.99 10.01 10.04 T:xoodyakround3 10.05 10.06 10.07 ascon128av12 14.80 14.82 14.83 ascon128v12 14.83 14.84 14.91 ascon80pqv12 20.72 20.72 20.79 ascon128abi32v12 21.79 21.81 21.86 T:schwaemm256128v2 29.05 29.06 29.07 T:schwaemm192192v2 29.27 29.33 29.47 romulusm 29.35 29.61 29.65 romulusn 30.18 30.33 30.51 ascon128bi32v12 31.98 32.08 32.13 T:schwaemm256256v2 33.17 33.35 33.60 T:schwaemm128128v2 34.11 34.17 34.47 T:isapa128v20 38.71 38.90 38.92 T:grain128aeadv2 40.95 41.03 41.13 T:isapa128av20 48.32 48.34 48.46 T:tinyjambu128v2 47.87 48.37 48.77 T:giftcofb128v1 52.61 52.68 52.78 T!!!romulust 53.12 53.16 53.25 T:tinyjambu256v2 53.77 53.82 53.90 T:tinyjambu192v2 70.66 70.76 70.86 T:isapk128av20 89.94 90.58 90.76 T:isapk128v20 100.59 100.72 100.93 T:elephant200v2 125.59 126.12 126.35 T:isapxv20 5131.02 5135.66 5140.78 T:elephant176v2 5890.40 5894.32 5899.06 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.55 0.56 0.57 T:aes128gcmv1 0.55 0.57 0.58 aes256gcmv1 9.99 10.01 10.01 T:xoodyakround3 10.29 10.30 10.31 ascon128av12 14.55 14.69 14.95 ascon80pqv12 14.87 14.88 14.89 ascon128v12 20.71 20.73 20.74 ascon128abi32v12 21.81 21.87 21.91 T:schwaemm256128v2 29.00 29.03 29.04 T:schwaemm192192v2 29.34 29.45 29.52 romulusm 29.45 29.53 29.75 romulusn 30.09 30.27 30.40 ascon128bi32v12 32.07 32.10 32.16 T:schwaemm256256v2 33.26 33.40 33.48 T:schwaemm128128v2 33.47 34.29 34.48 T:isapa128v20 38.73 38.97 38.97 T:grain128aeadv2 41.03 41.12 41.22 T:isapa128av20 48.04 48.25 48.37 T:giftcofb128v1 48.32 48.42 48.47 T:tinyjambu128v2 52.52 52.70 52.92 T!!!romulust 53.14 53.19 53.23 T:tinyjambu256v2 53.78 53.81 53.85 T:tinyjambu192v2 70.75 70.81 70.83 T:isapk128av20 90.50 90.58 90.67 T:isapk128v20 100.07 100.16 100.63 T:elephant200v2 126.10 126.50 126.85 T:isapxv20 5132.96 5134.80 5137.20 T:elephant176v2 5893.12 5897.60 5900.83 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.55 0.56 0.57 aes256gcmv1 0.55 0.56 0.56 T:aes128gcmv1 9.98 10.02 10.03 T:xoodyakround3 10.30 10.32 10.32 ascon128av12 14.57 14.71 14.73 ascon80pqv12 14.69 14.88 14.89 ascon128v12 20.72 20.72 20.73 ascon128abi32v12 21.80 21.88 21.91 T:schwaemm256128v2 29.03 29.04 29.05 T:schwaemm192192v2 29.30 29.36 29.47 romulusm 29.40 29.54 29.70 romulusn 30.09 30.26 30.51 ascon128bi32v12 32.06 32.10 32.15 T:schwaemm256256v2 33.17 33.31 33.43 T:schwaemm128128v2 33.77 34.26 34.46 T:isapa128v20 38.73 38.97 38.97 T:grain128aeadv2 41.01 41.16 41.22 T:isapa128av20 47.88 48.07 48.38 T:giftcofb128v1 48.36 48.40 48.49 T:tinyjambu128v2 52.49 52.69 52.83 T!!!romulust 53.12 53.16 53.29 T:tinyjambu256v2 53.76 53.78 53.83 T:tinyjambu192v2 70.72 70.83 71.25 T:isapk128av20 90.42 90.54 91.41 T:isapk128v20 99.93 100.04 100.95 T:elephant200v2 126.02 126.45 126.83 T:isapxv20 5128.33 5132.44 5137.25 T:elephant176v2 5894.91 5897.38 5900.26 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.13 1.14 1.15 T:aes128gcmv1 1.25 1.26 1.27 aes256gcmv1 10.67 10.68 10.69 ascon128av12 15.23 15.23 15.34 ascon80pqv12 15.31 15.31 15.34 ascon128v12 15.68 15.78 15.95 T:xoodyakround3 20.87 20.89 20.96 ascon128abi32v12 22.63 22.66 22.67 T:schwaemm256128v2 29.83 29.89 29.91 T:schwaemm192192v2 30.61 30.70 30.92 ascon128bi32v12 33.12 33.14 33.16 T:schwaemm256256v2 33.80 33.82 33.95 T:schwaemm128128v2 38.79 38.85 38.92 romulusn 39.33 39.38 39.48 T:grain128aeadv2 48.48 48.56 48.66 T:giftcofb128v1 53.14 53.48 53.71 romulusm 55.22 55.24 55.34 T:isapa128av20 62.63 62.75 62.79 T:tinyjambu128v2 74.47 74.48 74.55 T:isapa128v20 75.20 75.23 75.29 T:tinyjambu192v2 79.12 79.15 79.26 T:tinyjambu256v2 99.05 99.07 99.40 T:isapk128av20 103.09 103.15 103.37 T!!!romulust 151.91 152.44 153.13 T:elephant200v2 208.03 208.49 209.88 T:isapk128v20 277.66 277.73 277.81 T:isapxv20 7819.00 7822.05 7823.67 T:elephant176v2 8946.48 8949.57 8951.84 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.14 1.15 1.15 T:aes128gcmv1 1.29 1.30 1.31 aes256gcmv1 10.54 10.54 10.56 ascon128av12 15.17 15.17 15.17 ascon128v12 15.21 15.27 15.38 ascon80pqv12 15.52 15.56 15.57 T:xoodyakround3 20.84 20.90 20.91 ascon128abi32v12 22.62 22.67 22.70 T:schwaemm256128v2 29.83 29.85 29.91 T:schwaemm192192v2 30.64 30.73 30.80 ascon128bi32v12 33.06 33.11 33.15 T:schwaemm256256v2 33.74 33.89 33.98 T:schwaemm128128v2 37.60 38.06 38.31 romulusn 39.63 39.64 39.64 T:grain128aeadv2 48.47 48.51 48.58 T:giftcofb128v1 52.62 52.78 52.84 romulusm 55.03 55.26 55.41 T:isapa128av20 62.91 62.96 62.97 T:tinyjambu128v2 74.46 74.55 74.59 T:isapa128v20 75.00 75.12 75.19 T:tinyjambu192v2 79.26 79.31 79.34 T:tinyjambu256v2 99.06 99.13 99.45 T:isapk128av20 103.04 103.12 103.50 T!!!romulust 151.67 152.09 153.15 T:elephant200v2 208.14 208.67 209.81 T:isapk128v20 278.19 278.26 278.33 T:isapxv20 7819.90 7821.89 7825.01 T:elephant176v2 8947.00 8950.33 8952.09 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.14 1.14 1.15 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 10.54 10.54 10.55 ascon128av12 15.18 15.26 15.26 ascon128v12 15.21 15.26 15.37 ascon80pqv12 15.53 15.59 15.62 T:xoodyakround3 20.89 20.90 20.90 ascon128abi32v12 22.63 22.65 22.67 T:schwaemm256128v2 29.81 29.85 29.88 T:schwaemm192192v2 30.65 30.70 30.74 ascon128bi32v12 33.06 33.11 33.15 T:schwaemm256256v2 33.83 33.87 33.94 T:schwaemm128128v2 37.75 38.14 38.31 romulusn 39.60 39.64 39.64 T:grain128aeadv2 42.92 43.10 43.25 T:isapa128av20 46.15 46.17 46.29 T:isapa128v20 48.50 48.64 48.83 T:giftcofb128v1 52.58 52.71 52.93 romulusm 54.24 54.27 54.33 T!!!romulust 62.91 62.95 62.98 T:tinyjambu128v2 75.05 75.11 75.19 T:tinyjambu192v2 76.80 76.83 76.87 T:isapk128av20 79.31 79.34 79.38 T:tinyjambu256v2 135.78 135.91 137.52 T:isapk128v20 151.68 152.42 152.80 T:elephant200v2 181.97 182.12 182.24 T:isapxv20 7820.01 7821.17 7826.93 T:elephant176v2 8946.20 8949.05 8951.48 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.74 6.79 6.85 T:aes128gcmv1 6.98 7.07 7.29 aes256gcmv1 16.16 16.20 16.51 ascon128av12 20.24 20.55 20.63 ascon128v12 20.60 20.72 20.90 ascon80pqv12 23.06 23.21 23.38 T:xoodyakround3 30.66 30.74 31.07 ascon128abi32v12 37.12 37.22 37.41 T:schwaemm256128v2 39.81 39.91 40.36 ascon128bi32v12 43.83 43.91 43.99 T:schwaemm128128v2 46.02 46.48 46.71 romulusn 48.05 48.09 48.26 T:schwaemm192192v2 49.66 49.71 49.85 T:grain128aeadv2 52.59 52.76 52.99 T:schwaemm256256v2 58.74 59.16 59.41 T:giftcofb128v1 61.57 61.95 62.94 romulusm 73.95 74.09 74.42 T:tinyjambu128v2 88.16 88.30 88.50 T:tinyjambu192v2 92.55 92.70 93.09 T:tinyjambu256v2 139.88 140.21 141.12 T!!!romulust 141.15 141.48 141.63 T:isapa128av20 216.56 216.90 217.18 T:elephant200v2 317.78 318.19 318.98 T:isapk128av20 608.05 610.52 611.40 T:isapa128v20 2301.41 2311.22 2342.96 T:isapk128v20 2732.48 2741.66 2746.38 T:isapxv20 9734.20 9734.66 9744.84 T:elephant176v2 11978.86 11984.77 11989.94 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.70 6.81 7.20 aes256gcmv1 6.89 6.95 7.02 T:aes128gcmv1 16.07 16.16 16.38 ascon128av12 20.24 20.43 20.59 ascon128v12 20.29 20.50 20.62 ascon80pqv12 22.88 23.20 23.34 T:xoodyakround3 30.77 30.95 31.38 ascon128abi32v12 37.22 37.34 37.48 T:schwaemm256128v2 40.01 40.23 40.60 ascon128bi32v12 43.70 43.78 44.20 T:schwaemm128128v2 45.86 46.13 46.56 romulusn 47.99 48.06 48.14 T:schwaemm192192v2 49.88 49.92 50.09 T:grain128aeadv2 52.48 52.58 52.66 T:schwaemm256256v2 59.28 59.48 59.91 T:giftcofb128v1 63.55 63.90 64.16 romulusm 74.27 74.38 74.56 T:tinyjambu128v2 88.10 88.24 88.41 T:tinyjambu192v2 92.87 93.02 93.39 T:tinyjambu256v2 139.73 140.02 140.34 T!!!romulust 141.53 141.79 142.26 T:isapa128av20 216.28 216.68 216.89 T:elephant200v2 318.62 319.05 327.09 T:isapk128av20 610.33 610.91 611.31 T:isapa128v20 2301.91 2303.54 2341.61 T:isapk128v20 2742.52 2742.88 2748.45 T:isapxv20 9733.57 9742.34 9746.13 T:elephant176v2 11982.23 11990.72 11995.83 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.69 6.76 6.95 aes256gcmv1 6.84 6.86 6.91 T:aes128gcmv1 15.84 15.95 16.08 ascon128av12 20.09 20.20 20.24 ascon128v12 20.18 20.29 20.31 ascon80pqv12 22.95 23.15 23.19 T:xoodyakround3 30.73 30.85 30.99 ascon128abi32v12 37.14 37.22 37.30 T:schwaemm256128v2 39.81 40.22 40.35 ascon128bi32v12 43.83 43.90 44.00 T:schwaemm128128v2 46.09 46.36 46.71 romulusn 47.96 47.98 48.05 T:schwaemm192192v2 49.85 49.88 49.98 T:grain128aeadv2 52.51 52.61 52.69 T:schwaemm256256v2 59.26 59.54 59.88 T:giftcofb128v1 63.21 63.55 63.74 romulusm 74.24 74.36 74.48 T:tinyjambu128v2 88.08 88.24 88.47 T:tinyjambu192v2 89.00 89.12 89.65 T!!!romulust 91.36 91.59 92.03 T:isapa128av20 92.88 93.02 93.10 T:tinyjambu256v2 201.66 201.97 202.36 T:isapk128av20 216.33 216.70 216.86 T:elephant200v2 318.39 318.77 319.07 T:isapa128v20 1185.08 1194.80 1224.19 T:isapk128v20 1434.97 1435.32 1441.23 T:isapxv20 9736.32 9741.52 9745.53 T:elephant176v2 11974.62 11984.75 11992.48 T:elephant160v2