VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.54 1.54 1.55 T:aes128gcmv1 1.67 1.68 1.70 aes256gcmv1 6.41 6.42 6.42 ascon128av12 9.38 9.39 9.40 ascon128v12 9.41 9.42 9.42 ascon80pqv12 11.19 11.26 11.39 ascon128abi32v12 16.97 17.05 17.13 ascon128bi32v12 17.88 17.93 17.98 T:xoodyakround3 19.45 19.52 19.59 T:schwaemm256128v2 23.67 23.72 23.73 T:schwaemm256256v2 25.66 25.74 25.87 T:schwaemm192192v2 27.27 27.34 27.38 T:grain128aeadv2 27.56 27.67 27.88 T:schwaemm128128v2 35.68 35.77 35.83 romulusn 36.38 36.46 36.47 T:isapa128av20 36.54 36.55 36.55 T:isapa128v20 40.48 40.51 40.56 T:giftcofb128v1 57.98 58.02 58.05 romulusm 61.63 61.63 61.69 T:tinyjambu128v2 64.60 64.65 64.74 T:isapk128av20 68.91 68.93 68.96 T:tinyjambu192v2 75.95 75.96 75.97 T:tinyjambu256v2 84.84 85.23 85.57 T:isapk128v20 118.74 118.77 118.79 romulust 148.12 149.26 153.26 T:isapxv20 254.08 254.41 254.97 T:elephant200v2 6480.36 6491.19 6536.81 T:elephant176v2 7158.25 7161.82 7164.81 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.69 1.70 1.72 T:aes128gcmv1 1.82 1.83 1.84 aes256gcmv1 6.29 6.31 6.32 ascon128av12 9.27 9.30 9.31 ascon128v12 9.38 9.39 9.40 ascon80pqv12 11.23 11.26 11.27 ascon128abi32v12 16.80 16.91 16.97 ascon128bi32v12 17.74 17.80 17.86 T:xoodyakround3 19.47 19.51 19.59 T:schwaemm256128v2 23.66 23.73 23.76 T:schwaemm256256v2 25.64 25.74 25.85 T:schwaemm192192v2 26.98 27.19 27.52 T:grain128aeadv2 27.48 27.67 27.81 T:schwaemm128128v2 35.78 35.85 35.87 romulusn 36.41 36.47 36.56 T:isapa128av20 36.49 36.56 36.60 T:isapa128v20 40.48 40.53 40.57 T:giftcofb128v1 58.14 58.21 58.26 romulusm 61.51 61.56 61.58 T:tinyjambu128v2 65.26 65.36 65.43 T:isapk128av20 68.67 68.76 68.76 T:tinyjambu192v2 76.00 76.04 76.07 T:tinyjambu256v2 85.01 85.68 85.70 T:isapk128v20 118.75 118.79 118.82 romulust 149.17 149.51 152.20 T:isapxv20 253.83 254.22 255.02 T:elephant200v2 6477.92 6493.49 6546.06 T:elephant176v2 7157.26 7161.92 7163.69 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.68 1.69 1.71 T:aes128gcmv1 1.81 1.82 1.83 aes256gcmv1 6.33 6.33 6.34 ascon128av12 9.28 9.29 9.31 ascon128v12 9.36 9.38 9.39 ascon80pqv12 11.23 11.25 11.25 ascon128abi32v12 16.75 16.89 16.97 ascon128bi32v12 17.75 17.81 17.90 T:xoodyakround3 18.21 18.22 18.30 T:isapa128v20 19.47 19.54 19.56 T:schwaemm256128v2 23.68 23.70 23.73 T:schwaemm256256v2 24.17 24.20 24.23 T:isapa128av20 25.70 25.79 25.88 T:schwaemm192192v2 27.04 27.07 27.50 T:grain128aeadv2 27.55 27.62 27.83 T:schwaemm128128v2 35.83 35.85 35.87 romulusn 39.78 39.82 39.87 romulust 40.48 40.51 40.53 T:giftcofb128v1 44.48 44.52 44.58 T:isapk128av20 54.60 54.63 54.66 T:isapk128v20 58.11 58.16 58.22 romulusm 61.48 61.54 61.58 T:tinyjambu128v2 68.71 68.72 68.75 T:tinyjambu192v2 76.03 76.05 76.07 T:tinyjambu256v2 86.68 87.20 87.36 T:isapxv20 253.91 254.72 254.88 T:elephant200v2 6477.56 6490.44 6540.73 T:elephant176v2 7158.48 7163.03 7166.40 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.02 1.03 T:aes128gcmv1 1.08 1.09 1.10 aes256gcmv1 6.38 6.41 6.43 ascon128av12 9.32 9.34 9.37 ascon80pqv12 9.33 9.36 9.36 ascon128v12 11.14 11.16 11.19 ascon128abi32v12 13.47 13.50 13.56 T:xoodyakround3 16.80 16.89 16.93 ascon128bi32v12 19.38 19.45 19.49 T:schwaemm256128v2 23.54 23.59 23.60 T:schwaemm256256v2 25.59 25.61 25.67 T:schwaemm192192v2 27.17 27.28 27.36 T:grain128aeadv2 27.42 27.44 27.45 T:isapa128v20 27.54 27.59 27.68 T:schwaemm128128v2 28.96 29.00 29.02 romulusn 30.27 30.30 30.32 T:isapa128av20 40.11 40.13 40.16 romulusm 40.38 40.40 40.44 T:giftcofb128v1 50.61 50.65 50.66 T:tinyjambu128v2 54.30 54.33 54.34 T:tinyjambu192v2 54.57 54.64 54.67 T:isapk128av20 57.95 57.97 57.99 T:tinyjambu256v2 69.75 69.79 70.17 T:isapk128v20 79.26 79.29 79.32 romulust 116.88 117.29 117.98 T:isapxv20 190.10 190.35 190.44 T:elephant200v2 4843.20 4847.31 4892.35 T:elephant176v2 5367.55 5369.63 5370.88 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.09 1.10 1.11 T:aes128gcmv1 1.15 1.17 1.19 aes256gcmv1 6.34 6.34 6.36 ascon128av12 9.28 9.31 9.32 ascon128v12 9.32 9.34 9.35 ascon80pqv12 11.07 11.10 11.17 ascon128abi32v12 13.37 13.39 13.50 T:xoodyakround3 16.70 16.74 16.78 ascon128bi32v12 19.34 19.42 19.46 T:schwaemm256128v2 23.55 23.58 23.60 T:schwaemm256256v2 25.61 25.64 25.67 T:schwaemm192192v2 27.09 27.15 27.23 T:grain128aeadv2 27.43 27.47 27.49 T:isapa128v20 27.42 27.54 27.56 T:schwaemm128128v2 29.00 29.03 29.07 romulusn 30.28 30.31 30.35 T:isapa128av20 40.16 40.23 40.32 romulusm 40.40 40.42 40.45 T:giftcofb128v1 50.59 50.61 50.63 T:tinyjambu128v2 54.22 54.24 54.29 T:tinyjambu192v2 54.90 54.98 55.13 T:isapk128av20 58.06 58.09 58.12 T:tinyjambu256v2 70.09 70.19 70.21 T:isapk128v20 79.23 79.28 79.29 romulust 116.64 117.66 118.35 T:isapxv20 190.23 190.30 190.60 T:elephant200v2 4840.06 4849.73 4891.31 T:elephant176v2 5368.20 5370.17 5371.33 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.10 1.11 T:aes128gcmv1 1.17 1.17 1.17 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.29 9.30 9.31 ascon128v12 9.33 9.34 9.35 ascon80pqv12 11.09 11.11 11.11 ascon128abi32v12 13.39 13.40 13.49 T:xoodyakround3 16.73 16.74 16.74 ascon128bi32v12 18.29 18.34 18.42 T:isapa128v20 19.35 19.39 19.44 T:schwaemm256128v2 23.54 23.57 23.64 T:schwaemm256256v2 24.17 24.19 24.20 T:isapa128av20 25.58 25.63 25.72 T:schwaemm192192v2 27.12 27.14 27.17 T:grain128aeadv2 27.52 27.55 27.66 T:schwaemm128128v2 29.03 29.05 29.06 romulusn 39.77 39.79 39.82 romulust 40.17 40.22 40.27 romulusm 40.40 40.43 40.44 T:giftcofb128v1 44.51 44.55 44.56 T:isapk128av20 50.62 50.63 50.64 T:tinyjambu128v2 54.20 54.20 54.22 T:tinyjambu192v2 54.64 54.66 54.66 T:isapk128v20 58.00 58.03 58.03 T:tinyjambu256v2 86.30 86.48 86.64 T:isapxv20 189.25 189.47 189.91 T:elephant200v2 4844.73 4849.71 4894.97 T:elephant176v2 5368.65 5369.81 5371.12 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.51 0.51 0.53 T:aes128gcmv1 0.51 0.53 0.54 aes256gcmv1 6.31 6.31 6.35 ascon128av12 9.03 9.07 9.12 T:xoodyakround3 9.25 9.27 9.29 ascon80pqv12 9.28 9.29 9.30 ascon128v12 10.93 10.94 10.95 ascon128abi32v12 16.52 16.63 16.73 ascon128bi32v12 18.32 18.32 18.36 T:isapa128v20 19.23 19.30 19.37 T:schwaemm256128v2 22.22 22.23 22.25 romulusn 22.24 22.26 22.41 romulusm 23.41 23.46 23.53 T:schwaemm256256v2 24.14 24.16 24.20 T:isapa128av20 25.42 25.52 25.59 T:schwaemm192192v2 27.14 27.19 27.22 T:grain128aeadv2 27.25 27.35 27.60 T:schwaemm128128v2 39.69 39.69 39.70 T:tinyjambu192v2 39.69 39.70 39.71 T:tinyjambu128v2 39.77 39.78 39.78 romulust 40.02 40.02 40.08 T:tinyjambu256v2 40.25 40.29 40.32 T:giftcofb128v1 44.53 44.60 44.64 T:isapk128av20 54.64 54.73 54.78 T:isapk128v20 85.87 86.51 86.58 T:isapxv20 126.01 126.08 126.42 T:elephant200v2 3191.95 3203.09 3219.84 T:elephant176v2 3571.71 3574.49 3576.57 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.52 0.53 0.54 aes256gcmv1 6.35 6.36 6.36 ascon128av12 9.04 9.11 9.15 T:xoodyakround3 9.30 9.30 9.32 ascon128v12 9.29 9.31 9.31 ascon80pqv12 10.94 10.96 10.97 ascon128abi32v12 16.50 16.58 16.63 ascon128bi32v12 18.33 18.41 18.46 T:isapa128v20 19.26 19.33 19.42 T:schwaemm256128v2 22.24 22.25 22.28 romulusn 22.24 22.26 22.40 romulusm 23.39 23.48 23.49 T:schwaemm256256v2 24.13 24.21 24.29 T:isapa128av20 25.49 25.55 25.60 T:schwaemm192192v2 26.74 26.85 27.25 T:grain128aeadv2 27.32 27.36 27.55 T:schwaemm128128v2 39.66 39.68 39.70 T:tinyjambu128v2 39.69 39.69 39.71 T:tinyjambu192v2 39.73 39.78 39.83 romulust 40.06 40.13 40.13 T:tinyjambu256v2 40.27 40.32 40.38 T:giftcofb128v1 44.52 44.57 44.61 T:isapk128av20 54.64 54.67 54.71 T:isapk128v20 85.88 86.16 86.75 T:isapxv20 125.94 126.21 126.43 T:elephant200v2 3192.45 3200.01 3220.41 T:elephant176v2 3572.52 3574.84 3577.56 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.50 0.51 0.52 T:aes128gcmv1 0.52 0.53 0.53 aes256gcmv1 6.31 6.31 6.35 ascon128av12 8.97 9.06 9.11 T:xoodyakround3 9.28 9.29 9.30 ascon128v12 9.28 9.31 9.32 ascon80pqv12 10.95 10.97 10.97 ascon128abi32v12 16.52 16.63 16.69 ascon128bi32v12 18.33 18.36 18.58 T:isapa128v20 19.25 19.28 19.36 T:schwaemm256128v2 22.25 22.27 22.28 romulusn 22.24 22.41 22.42 romulusm 23.45 23.46 23.50 T:schwaemm256256v2 24.13 24.20 24.25 T:isapa128av20 25.47 25.53 25.61 T:schwaemm192192v2 26.58 26.91 27.20 T:grain128aeadv2 27.26 27.31 27.55 T:schwaemm128128v2 39.68 39.69 39.71 T:tinyjambu128v2 39.70 39.70 39.70 T:tinyjambu192v2 39.75 39.77 39.84 romulust 40.00 40.01 40.08 T:tinyjambu256v2 40.31 40.34 40.38 T:giftcofb128v1 44.54 44.59 44.62 T:isapk128av20 54.64 54.69 54.71 T:isapk128v20 85.82 86.18 86.74 T:isapxv20 125.90 126.03 126.39 T:elephant200v2 3193.83 3202.48 3227.68 T:elephant176v2 3571.62 3573.81 3577.29 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.17 T:aes128gcmv1 1.23 1.23 1.24 aes256gcmv1 6.55 6.57 6.59 ascon128av12 9.48 9.49 9.52 ascon128v12 9.50 9.50 9.53 ascon80pqv12 11.84 11.84 11.85 ascon128abi32v12 13.60 13.62 13.65 T:xoodyakround3 17.19 17.21 17.23 ascon128bi32v12 19.93 19.95 20.04 T:schwaemm256128v2 24.19 24.21 24.23 T:schwaemm256256v2 26.19 26.25 26.30 T:schwaemm192192v2 27.59 27.64 27.70 T:grain128aeadv2 27.86 27.93 28.00 T:schwaemm128128v2 29.23 29.26 29.27 romulusn 33.52 33.52 33.54 T:isapa128av20 40.05 40.06 40.07 T:isapa128v20 40.39 40.45 40.47 romulusm 40.78 40.81 40.82 T:giftcofb128v1 51.01 51.05 51.07 T:tinyjambu128v2 54.73 54.75 54.75 T:tinyjambu192v2 58.38 58.45 58.47 T:tinyjambu256v2 60.90 60.91 60.93 T:isapk128av20 80.49 80.51 80.54 romulust 121.59 121.61 121.93 T:isapk128v20 190.07 190.40 190.69 T:isapxv20 194.01 194.28 194.77 T:elephant200v2 4877.78 4884.25 4920.01 T:elephant176v2 5428.22 5429.82 5431.81 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.23 1.24 T:aes128gcmv1 1.32 1.32 1.32 aes256gcmv1 6.51 6.51 6.52 ascon128av12 9.46 9.46 9.46 ascon128v12 9.48 9.48 9.50 ascon80pqv12 11.41 11.41 11.46 ascon128abi32v12 13.55 13.56 13.62 T:xoodyakround3 17.08 17.11 17.11 ascon128bi32v12 19.97 20.03 20.06 T:schwaemm256128v2 24.16 24.22 24.22 T:schwaemm256256v2 26.20 26.23 26.28 T:schwaemm192192v2 27.49 27.51 27.57 T:grain128aeadv2 27.82 27.88 27.97 T:schwaemm128128v2 29.29 29.29 29.32 romulusn 33.54 33.56 33.60 T:isapa128av20 40.10 40.10 40.12 T:isapa128v20 40.47 40.51 40.58 romulusm 40.78 40.80 40.83 T:giftcofb128v1 51.00 51.01 51.01 T:tinyjambu128v2 54.63 54.63 54.69 T:tinyjambu192v2 58.52 58.53 58.54 T:tinyjambu256v2 61.37 61.43 61.46 T:isapk128av20 80.46 80.47 80.51 romulust 121.58 121.94 121.96 T:isapk128v20 190.32 190.53 190.93 T:isapxv20 194.00 194.11 194.29 T:elephant200v2 4880.13 4884.04 4915.79 T:elephant176v2 5427.47 5429.62 5431.64 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.23 1.24 T:aes128gcmv1 1.31 1.32 1.32 aes256gcmv1 6.50 6.50 6.51 ascon128av12 9.44 9.44 9.45 ascon128v12 9.49 9.49 9.49 ascon80pqv12 11.41 11.41 11.41 ascon128abi32v12 13.58 13.61 13.64 T:xoodyakround3 17.09 17.11 17.12 ascon128bi32v12 19.98 20.00 20.09 T:schwaemm256128v2 24.19 24.22 24.23 T:schwaemm256256v2 24.73 24.78 24.83 T:isapa128v20 25.98 26.00 26.01 T:isapa128av20 26.18 26.24 26.29 T:schwaemm192192v2 27.48 27.51 27.72 T:grain128aeadv2 27.82 27.93 27.96 T:schwaemm128128v2 29.25 29.28 29.31 romulusn 40.41 40.49 40.53 romulusm 40.81 40.83 40.85 T:giftcofb128v1 40.94 40.97 41.03 romulust 48.13 48.14 48.16 T:isapk128av20 51.00 51.03 51.04 T:tinyjambu128v2 54.62 54.63 54.63 T:tinyjambu192v2 58.48 58.48 58.49 T:tinyjambu256v2 81.13 81.14 81.15 T:isapk128v20 123.92 124.04 124.29 T:isapxv20 193.93 194.27 194.28 T:elephant200v2 4877.22 4882.66 4915.83 T:elephant176v2 5426.99 5429.96 5430.88 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.05 6.06 6.08 T:aes128gcmv1 8.02 8.12 8.15 aes256gcmv1 10.55 10.63 10.83 ascon128av12 12.61 13.02 13.48 ascon80pqv12 12.70 13.10 13.37 ascon128v12 20.35 20.67 20.81 T:xoodyakround3 23.73 24.29 25.98 ascon128bi32v12 27.11 27.83 28.23 ascon128abi32v12 32.62 33.00 33.30 T:schwaemm256128v2 35.10 35.13 35.21 romulusn 35.34 35.62 36.38 T:grain128aeadv2 35.72 36.22 37.46 T:schwaemm128128v2 38.65 38.73 38.82 T:schwaemm256256v2 42.19 42.62 42.96 T:schwaemm192192v2 46.16 46.29 46.48 romulusm 49.36 49.45 49.78 T:giftcofb128v1 59.90 60.12 60.24 T:tinyjambu128v2 64.26 64.33 64.66 T:tinyjambu192v2 68.09 68.49 68.74 T:tinyjambu256v2 107.12 107.22 108.07 T:isapa128av20 107.80 107.88 108.21 romulust 194.81 194.88 195.59 T:isapk128av20 274.32 274.85 275.66 T:elephant200v2 330.38 330.38 331.05 T:isapa128v20 1298.46 1298.50 1299.12 T:isapk128v20 1844.45 1852.27 1853.03 T:isapxv20 6062.16 6070.50 6103.77 T:elephant176v2 7260.09 7263.03 7269.55 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.73 5.76 5.84 T:aes128gcmv1 8.07 8.10 8.18 aes256gcmv1 10.32 10.51 10.78 ascon128av12 12.83 12.98 13.33 ascon80pqv12 12.81 13.06 13.19 ascon128v12 18.03 18.56 18.90 ascon128abi32v12 19.78 20.54 21.14 T:xoodyakround3 25.01 25.17 26.33 ascon128bi32v12 32.74 32.93 33.43 T:schwaemm256128v2 35.01 35.12 35.20 romulusn 35.38 35.62 36.85 T:grain128aeadv2 36.23 36.56 36.77 T:schwaemm128128v2 38.62 38.72 38.85 T:schwaemm256256v2 42.34 42.66 43.15 T:schwaemm192192v2 47.59 47.69 47.80 romulusm 49.56 49.67 50.16 T:giftcofb128v1 60.02 60.02 60.09 T:tinyjambu128v2 64.03 64.09 64.15 T:tinyjambu192v2 68.30 68.34 68.73 T:tinyjambu256v2 107.39 108.09 108.22 T:isapa128av20 108.20 108.44 108.76 romulust 197.09 197.62 198.27 T:isapk128av20 273.51 273.61 274.45 T:elephant200v2 330.28 330.95 331.37 T:isapa128v20 1298.77 1299.02 1299.55 T:isapk128v20 1844.85 1849.47 1849.73 T:isapxv20 6059.76 6062.72 6106.23 T:elephant176v2 7261.71 7264.45 7267.17 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.73 5.73 5.76 T:aes128gcmv1 7.99 8.01 8.03 aes256gcmv1 10.26 10.49 10.55 ascon128av12 12.83 12.89 13.02 ascon128v12 12.71 12.94 13.23 ascon80pqv12 18.00 18.00 18.19 ascon128abi32v12 19.94 20.42 20.46 T:xoodyakround3 25.35 25.62 26.02 ascon128bi32v12 32.82 32.91 33.22 T:schwaemm256128v2 35.03 35.11 35.24 romulusn 35.34 35.98 36.22 T:grain128aeadv2 36.16 36.17 37.48 T:schwaemm128128v2 38.61 38.70 38.77 T:schwaemm256256v2 42.12 42.16 42.43 T:schwaemm192192v2 47.49 47.64 47.74 romulusm 49.87 49.88 50.15 T:giftcofb128v1 60.05 60.22 60.23 T:tinyjambu128v2 64.18 64.29 64.29 T:tinyjambu192v2 67.20 67.34 67.47 T:isapa128av20 67.52 67.74 68.05 romulust 68.29 68.33 68.48 T:tinyjambu256v2 121.46 121.93 122.18 T:isapk128av20 172.78 172.94 173.00 T:isapa128v20 272.82 274.16 275.35 T:elephant200v2 679.07 679.42 679.62 T:isapk128v20 967.45 968.30 972.98 T:isapxv20 6062.62 6065.91 6106.34 T:elephant176v2 7260.96 7262.34 7264.84 T:elephant160v2