VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.92 0.95 0.97 T:aes128gcmv1 1.03 1.05 1.10 aes256gcmv1 6.69 6.72 6.75 ascon128av12 9.98 10.03 10.09 ascon80pqv12 10.03 10.08 10.11 ascon128v12 13.21 13.24 13.27 ascon128abi32v12 13.26 13.33 13.39 T:schwaemm256128v2 15.26 15.34 15.45 T:xoodyakround3 17.34 17.41 17.45 T:schwaemm192192v2 18.23 18.32 18.39 T:schwaemm256256v2 18.89 18.95 19.49 T:schwaemm128128v2 19.72 19.79 20.21 ascon128bi32v12 23.60 23.64 23.66 T:grain128aeadv2 32.92 32.98 33.05 T:giftcofb128v1 38.34 38.49 38.59 T:isapa128v20 38.82 38.84 38.88 romulusn 39.17 39.27 39.51 T:isapa128av20 55.10 55.31 55.67 T:isapk128av20 62.69 62.75 62.84 romulusm 65.58 65.66 65.71 T:tinyjambu128v2 76.64 77.32 78.10 T:isapk128v20 77.83 77.94 78.07 T:tinyjambu192v2 83.88 84.05 84.10 T:tinyjambu256v2 129.46 129.53 129.68 romulust 131.82? 141.26? 150.18? T:isapxv20 166.80 167.20 169.33 T:elephant200v2 4931.28 4937.92 4942.42 T:elephant176v2 5585.38 5614.59 5651.06 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.68 0.70 0.71 T:aes128gcmv1 0.79 0.81 0.83 aes256gcmv1 6.67 6.71 6.74 ascon128av12 9.90 9.99 10.08 ascon128v12 9.97 10.03 10.07 ascon80pqv12 13.02 13.09 13.12 ascon128abi32v12 13.23 13.28 13.35 T:schwaemm256128v2 15.04 15.15 15.28 T:xoodyakround3 17.31 17.38 17.58 T:schwaemm192192v2 18.12 18.35 18.41 T:schwaemm256256v2 19.00 19.05 19.11 T:schwaemm128128v2 19.38 19.49 19.56 ascon128bi32v12 23.08 23.13 23.16 T:grain128aeadv2 33.09 33.12 33.18 T:giftcofb128v1 38.37 38.51 38.64 T:isapa128v20 38.75 38.81 38.92 romulusn 39.23 39.37 39.63 T:isapa128av20 55.17 55.40 55.55 T:isapk128av20 62.92 62.99 63.13 romulusm 65.18 65.30 65.38 T:tinyjambu128v2 76.71 77.17 77.59 T:isapk128v20 77.42 78.04 78.14 T:tinyjambu192v2 83.44 84.01 84.07 T:tinyjambu256v2 129.41 129.53 129.65 romulust 111.49? 141.40? 166.31? T:isapxv20 163.00 163.40 166.46 T:elephant200v2 4928.78 4934.56 4939.70 T:elephant176v2 5551.89 5601.14 5657.11 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.70 0.71 T:aes128gcmv1 0.80 0.81 0.83 aes256gcmv1 6.68 6.70 6.73 ascon128av12 9.91 9.97 10.04 ascon128v12 9.98 10.02 10.05 ascon80pqv12 13.04 13.09 13.15 ascon128abi32v12 13.27 13.36 13.41 T:schwaemm256128v2 15.16 15.24 15.40 T:xoodyakround3 17.32 17.37 17.43 T:schwaemm192192v2 18.24 18.34 18.43 T:schwaemm256256v2 18.91 18.97 19.05 T:isapa128v20 18.94 19.04 19.11 T:schwaemm128128v2 19.39 19.53 19.86 ascon128bi32v12 23.08 23.11 23.14 T:grain128aeadv2 26.30 26.37 26.43 T:isapa128av20 33.07 33.09 33.13 T:giftcofb128v1 35.81 36.10 36.23 T:isapk128av20 38.92 38.98 39.04 romulusn 44.44 44.55 44.61 romulust 49.00 49.26 49.48 T:isapk128v20 62.92 63.03 63.07 romulusm 65.56 65.61 65.65 T:tinyjambu128v2 78.00 78.06 78.16 T:tinyjambu192v2 83.99 84.04 84.08 T:tinyjambu256v2 60.06? 87.00? 106.08? T:isapxv20 163.60 166.40 170.35 T:elephant200v2 4935.41 4941.59 4945.02 T:elephant176v2 5537.06 5577.37 5657.13 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.61 0.63 0.64 T:aes128gcmv1 0.67 0.69 0.70 aes256gcmv1 6.68 6.71 6.73 ascon128av12 9.99 10.01 10.03 ascon128v12 10.00 10.03 10.07 ascon80pqv12 11.73 11.77 11.82 T:xoodyakround3 13.22 13.25 13.31 T:schwaemm256128v2 13.38 13.40 13.43 ascon128abi32v12 17.27 17.30 17.38 T:schwaemm192192v2 18.15 18.20 18.29 T:schwaemm256256v2 18.81 18.85 18.88 T:schwaemm128128v2 20.20 20.27 20.32 ascon128bi32v12 23.62 23.66 23.70 T:grain128aeadv2 28.69 28.76 28.83 T:isapa128v20 31.13 31.18 31.20 romulusn 32.78 32.82 32.86 T:giftcofb128v1 32.69 32.90 33.08 T:isapa128av20 42.90 42.96 43.00 romulusm 45.73 45.89 46.04 T:isapk128av20 53.58 53.61 53.65 T:tinyjambu128v2 60.35 60.63 60.92 T:isapk128v20 60.91 60.94 61.05 T:tinyjambu192v2 63.34 63.42 63.47 T:tinyjambu256v2 87.03 87.14 87.19 romulust 107.40 114.06 118.35 T:isapxv20 121.28 122.93 123.72 T:elephant200v2 3682.79 3686.58 3697.56 T:elephant176v2 4189.50 4206.44 4258.49 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.48 0.50 0.52 T:aes128gcmv1 0.55 0.57 0.58 aes256gcmv1 6.66 6.67 6.70 ascon128av12 9.96 9.99 10.04 ascon128v12 9.98 10.03 10.07 ascon80pqv12 11.63 11.66 11.81 T:xoodyakround3 13.20 13.24 13.30 T:schwaemm256128v2 13.28 13.31 13.33 ascon128abi32v12 17.27 17.34 17.38 T:schwaemm192192v2 18.11 18.19 18.24 T:schwaemm256256v2 18.86 18.92 19.01 T:schwaemm128128v2 20.09 20.21 20.25 ascon128bi32v12 23.36 23.41 23.42 T:grain128aeadv2 28.74 28.79 28.85 T:isapa128v20 31.16 31.20 31.24 romulusn 32.93 32.94 32.97 T:giftcofb128v1 32.81 32.97 33.07 T:isapa128av20 43.04 43.07 43.11 romulusm 45.73 45.87 46.06 T:isapk128av20 53.58 53.60 53.65 T:tinyjambu128v2 60.46 60.87 61.16 T:isapk128v20 61.02 61.05 61.12 T:tinyjambu192v2 63.40 63.44 63.47 T:tinyjambu256v2 87.06 87.14 87.22 romulust 97.45? 114.15? 124.51? T:isapxv20 121.29 124.81 125.90 T:elephant200v2 3687.02 3689.90 3705.23 T:elephant176v2 4195.96 4215.35 4236.09 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.48 0.49 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 6.66 6.68 6.69 ascon128av12 9.94 9.99 10.03 ascon80pqv12 9.95 10.00 10.04 ascon128v12 11.62 11.68 11.72 T:xoodyakround3 13.23 13.26 13.28 T:schwaemm256128v2 13.26 13.28 13.30 ascon128abi32v12 17.31 17.33 17.36 T:schwaemm192192v2 18.13 18.21 18.29 T:schwaemm256256v2 18.87 18.96 19.04 T:schwaemm128128v2 18.97 19.02 19.06 T:isapa128v20 19.96 20.18 20.23 ascon128bi32v12 23.37 23.39 23.43 T:grain128aeadv2 26.35 26.40 26.57 T:isapa128av20 31.16 31.24 31.30 romulusn 32.90 32.93 32.99 T:giftcofb128v1 36.15 36.26 36.43 T:isapk128av20 43.02 43.05 43.13 romulusm 44.55 44.61 44.66 romulust 46.46 46.62 46.75 T:isapk128v20 53.55 53.59 53.66 T:tinyjambu128v2 61.00 61.03 61.08 T:tinyjambu192v2 63.34 63.40 63.49 T:tinyjambu256v2 71.70? 87.11? 94.64? T:isapxv20 123.39 123.65 126.26 T:elephant200v2 3687.23 3689.37 3694.03 T:elephant176v2 4178.55 4207.16 4251.36 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.30? 0.33? 0.35? aes256gcmv1 0.29? 0.33? 0.35? T:aes128gcmv1 6.64 6.67 6.70 ascon128av12 8.16 8.26 8.59 T:xoodyakround3 9.98 10.00 10.05 ascon128v12 9.99 10.05 10.10 ascon80pqv12 13.07 13.19 13.26 T:schwaemm256128v2 13.48 13.52 13.56 ascon128abi32v12 17.19 17.29 17.34 T:schwaemm192192v2 18.02 18.10 18.20 T:schwaemm256256v2 18.75 18.78 18.86 T:schwaemm128128v2 18.96 19.03 19.09 T:isapa128v20 20.29 20.36 20.40 ascon128bi32v12 23.18 23.21 23.26 romulusm 23.49 23.53 23.57 romulusn 23.64 23.69 23.73 T:grain128aeadv2 25.83 26.39 26.74 T:isapa128av20 32.72 32.82 32.93 T:giftcofb128v1 35.86 36.05 36.28 T:isapk128av20 41.52 41.57 41.61 T:tinyjambu128v2 42.71 42.79 42.86 T:tinyjambu256v2 43.81 43.97 44.05 T:tinyjambu192v2 44.01 44.10 44.23 T:isapk128v20 44.61 44.68 44.73 romulust 80.07 80.31 83.39 T:elephant200v2 80.17? 87.10? 90.24? T:isapxv20 2431.98 2437.43 2439.62 T:elephant176v2 2754.88 2789.33 2806.31 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.31 0.33 0.34 T:aes128gcmv1 0.32? 0.34? 0.36? aes256gcmv1 6.63 6.65 6.70 ascon128av12 7.98? 8.24? 9.10? T:xoodyakround3 9.89 10.01 10.06 ascon80pqv12 9.97 10.02 10.06 ascon128v12 13.09 13.19 13.28 T:schwaemm256128v2 13.48 13.52 13.56 ascon128abi32v12 17.20 17.23 17.28 T:schwaemm192192v2 17.98 18.07 18.17 T:schwaemm256256v2 18.73 18.77 18.85 T:schwaemm128128v2 18.94 19.01 19.12 T:isapa128v20 20.31 20.37 20.40 ascon128bi32v12 23.13 23.20 23.26 romulusm 23.47 23.51 23.56 romulusn 23.64 23.68 23.71 T:grain128aeadv2 25.88 26.39 26.47 T:isapa128av20 32.71 32.77 32.86 T:giftcofb128v1 35.73 35.92 36.25 T:isapk128av20 41.33 41.40 41.44 T:tinyjambu128v2 42.54 42.61 42.69 T:tinyjambu256v2 43.82 43.90 44.08 T:tinyjambu192v2 43.72 43.97 44.28 T:isapk128v20 44.66 44.72 44.78 romulust 80.20 82.29 85.27 T:elephant200v2 60.01? 87.05? 106.27? T:isapxv20 2434.49 2437.06 2440.84 T:elephant176v2 2776.30 2801.20 2842.69 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.31 0.33 0.34 T:aes128gcmv1 0.32 0.35 0.35 aes256gcmv1 6.64 6.68 6.70 ascon128av12 7.81 8.18 8.23 T:xoodyakround3 9.88 9.94 10.04 ascon80pqv12 9.97 10.01 10.06 ascon128v12 13.11 13.17 13.23 T:schwaemm256128v2 13.47 13.49 13.54 ascon128abi32v12 17.19 17.27 17.32 T:schwaemm192192v2 17.95 18.05 18.12 T:schwaemm256256v2 18.73 18.77 18.82 T:schwaemm128128v2 18.95 19.00 19.10 T:isapa128v20 20.31 20.35 20.38 ascon128bi32v12 23.18 23.21 23.26 romulusm 23.45 23.49 23.52 romulusn 23.61 23.68 23.70 T:grain128aeadv2 25.82 26.26 26.43 T:isapa128av20 32.77 32.86 32.90 T:giftcofb128v1 35.77 36.09 36.37 T:isapk128av20 41.33 41.38 41.45 T:tinyjambu128v2 42.56 42.61 42.64 T:tinyjambu256v2 43.67 43.86 44.12 T:isapk128v20 43.87 43.94 44.07 T:tinyjambu192v2 44.64 44.69 44.74 romulust 83.58 83.75 83.89 T:elephant200v2 60.20? 87.16? 106.33? T:isapxv20 2433.46 2438.24 2441.72 T:elephant176v2 2779.74 2802.32 2827.70 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.73 0.74 0.75 T:aes128gcmv1 0.81 0.82 0.83 aes256gcmv1 6.84 6.85 6.87 ascon128av12 10.14 10.15 10.18 ascon128v12 10.11 10.16 10.18 ascon80pqv12 11.62 11.96 12.10 T:xoodyakround3 13.61 13.63 13.65 T:schwaemm256128v2 13.71 13.74 13.76 ascon128abi32v12 17.72 17.73 17.76 T:schwaemm192192v2 18.66 18.69 18.76 T:schwaemm256256v2 19.10 19.12 19.29 T:schwaemm128128v2 20.50 20.53 20.55 ascon128bi32v12 23.96 23.98 24.01 T:grain128aeadv2 31.52 31.55 31.59 romulusn 33.11 33.17 33.19 T:giftcofb128v1 34.73 34.87 35.00 T:isapa128av20 41.71 41.74 41.78 T:isapa128v20 43.23 43.29 43.30 romulusm 51.96 52.06 52.13 T:isapk128av20 54.11 54.12 54.15 T:tinyjambu128v2 61.47 61.49 61.55 T:tinyjambu192v2 63.89 63.98 64.02 T:tinyjambu256v2 88.35 88.42 88.48 romulust 100.88 101.01 101.16 T:isapk128v20 125.52 125.66 127.92 T:elephant200v2 182.61 186.40 190.75 T:isapxv20 3712.71 3715.09 3718.22 T:elephant176v2 4231.38 4252.92 4280.08 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.60 0.60 0.62 T:aes128gcmv1 0.69 0.70 0.70 aes256gcmv1 6.81 6.84 6.85 ascon128av12 10.10 10.12 10.16 ascon128v12 10.09 10.13 10.18 ascon80pqv12 11.02 11.69 11.72 T:xoodyakround3 13.59 13.61 13.64 ascon128abi32v12 13.60 13.62 13.66 T:schwaemm256128v2 17.68 17.71 17.74 T:schwaemm192192v2 18.63 18.67 18.74 T:schwaemm256256v2 19.14 19.16 19.21 T:schwaemm128128v2 20.28 20.45 20.51 ascon128bi32v12 23.70 23.71 23.74 T:grain128aeadv2 31.54 31.58 31.62 romulusn 33.19 33.25 33.33 T:giftcofb128v1 34.96 35.02 35.09 T:isapa128av20 41.67 41.76 41.81 T:isapa128v20 43.37 43.39 43.44 romulusm 52.03 52.08 52.26 T:isapk128av20 54.10 54.14 54.73 T:tinyjambu128v2 61.59 61.61 61.63 T:tinyjambu192v2 63.96 63.98 64.01 T:tinyjambu256v2 88.38 88.43 88.48 romulust 100.49 100.77 100.93 T:isapk128v20 125.94 126.17 126.82 T:elephant200v2 182.71 186.29 199.96 T:isapxv20 3715.39 3717.67 3722.01 T:elephant176v2 4226.47 4244.64 4287.88 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.60 0.60 0.61 T:aes128gcmv1 0.69 0.69 0.70 aes256gcmv1 6.82 6.84 6.87 ascon128av12 10.08 10.13 10.18 ascon128v12 10.07 10.13 10.17 ascon80pqv12 11.50 11.72 11.75 T:xoodyakround3 13.61 13.63 13.66 ascon128abi32v12 13.61 13.65 13.69 T:schwaemm256128v2 17.65 17.69 17.72 T:schwaemm192192v2 18.63 18.69 18.76 T:schwaemm256256v2 19.14 19.17 19.21 T:schwaemm128128v2 20.47 20.50 20.54 ascon128bi32v12 23.70 23.72 23.75 T:grain128aeadv2 25.58 25.63 25.65 T:isapa128v20 27.55 27.71 27.73 T:isapa128av20 31.55 31.59 31.62 romulusn 33.17 33.25 33.28 T:giftcofb128v1 39.88 39.94 40.02 T:isapk128av20 43.36 43.39 43.42 romulusm 45.86 45.89 45.91 romulust 54.10 54.12 54.16 T:tinyjambu128v2 61.59 61.61 61.67 T:tinyjambu192v2 63.97 63.99 64.02 T:tinyjambu256v2 67.60 67.71 67.79 T:isapk128v20 120.24? 123.91? 134.67? T:isapxv20 125.39 125.62 125.83 T:elephant200v2 3712.99 3716.98 3720.46 T:elephant176v2 4236.67 4257.46 4279.52 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.98 5.11 5.35 T:aes128gcmv1 5.54 5.71 5.97 aes256gcmv1 10.21 10.34 10.41 ascon128av12 13.12 13.20 13.27 ascon80pqv12 13.20 13.25 13.36 ascon128v12 16.11? 17.06? 17.92? T:xoodyakround3 20.39 20.50 20.60 ascon128abi32v12 22.08 22.34 22.66 T:schwaemm256128v2 24.54 24.63 24.91 T:schwaemm128128v2 26.88 27.02 27.25 ascon128bi32v12 28.66 28.88 29.36 T:schwaemm192192v2 29.76 30.10 30.64 T:schwaemm256256v2 31.47 31.54 31.65 T:grain128aeadv2 39.12 39.20 39.27 T:giftcofb128v1 39.82 39.99 40.24 romulusn 49.76 49.87 50.02 romulusm 65.67 66.12 66.73 T:tinyjambu128v2 74.32 74.63 74.75 T:tinyjambu192v2 76.84 77.19 77.94 T:tinyjambu256v2 81.25 81.70 82.05 T:isapa128av20 117.56 117.94 118.16 romulust 178.00 178.68 179.43 T:elephant200v2 179.86 181.09 182.31 T:isapk128av20 339.96 340.82 341.38 T:isapa128v20 1007.70 1012.49 1014.12 T:isapk128v20 1820.15 1822.66 1910.34 T:isapxv20 4623.66 4628.37 4635.52 T:elephant176v2 5579.93 5690.12 5782.30 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.32 5.38 5.42 T:aes128gcmv1 6.05 6.12 6.22 aes256gcmv1 10.28 10.43 10.53 ascon128av12 13.02 13.16 13.33 ascon128v12 13.14 13.21 13.34 ascon80pqv12 16.48 16.88 17.89 T:xoodyakround3 20.16 20.41 20.70 ascon128abi32v12 22.21 22.47 22.60 T:schwaemm256128v2 24.41 24.73 24.81 T:schwaemm128128v2 26.73 26.95 27.07 ascon128bi32v12 28.88 29.23 29.54 T:schwaemm192192v2 29.84 30.39 31.20 T:schwaemm256256v2 31.43 31.46 31.59 T:grain128aeadv2 39.45 39.62 39.68 T:giftcofb128v1 39.84 39.98 40.11 romulusn 50.81 51.05 51.42 romulusm 65.77 66.05 66.60 T:tinyjambu128v2 74.45 75.30 79.62 T:tinyjambu192v2 76.84 77.15 77.50 T:tinyjambu256v2 81.20 81.43 81.69 T:isapa128av20 117.93 118.44 119.23 romulust 176.74 177.57 177.91 T:elephant200v2 179.38 180.23 181.88 T:isapk128av20 340.35 340.88 341.48 T:isapa128v20 1004.49 1011.34 1018.15 T:isapk128v20 1816.91? 1821.72? 2212.59? T:isapxv20 4618.52 4624.95 4631.91 T:elephant176v2 5703.39 5767.86 5778.61 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.41 5.47 5.52 T:aes128gcmv1 5.98 6.05 6.12 aes256gcmv1 10.23 10.33 10.49 ascon128av12 13.09 13.24 13.37 ascon128v12 13.16 13.25 13.37 ascon80pqv12 16.20 16.44 16.56 T:xoodyakround3 20.24 20.45 20.64 ascon128abi32v12 22.15 22.31 22.43 T:schwaemm256128v2 24.41 24.56 24.85 T:schwaemm128128v2 26.84 27.05 27.15 ascon128bi32v12 28.82 29.05 29.16 T:schwaemm192192v2 29.81 30.35 30.48 T:schwaemm256256v2 31.28 31.38 31.52 T:grain128aeadv2 39.43 39.59 39.77 T:giftcofb128v1 39.96 40.06 40.22 romulusn 50.83 50.95 51.10 romulusm 54.27 54.70 54.92 T:isapa128av20 65.70 66.18 67.84 T:tinyjambu128v2 74.19 74.46 74.59 T:tinyjambu192v2 74.90 75.55 75.98 romulust 76.79 77.23 77.45 T:tinyjambu256v2 112.41 112.97 113.54 T:isapk128av20 177.50 177.87 178.80 T:elephant200v2 177.47 177.98 178.22 T:isapa128v20 538.60 539.16 540.92 T:isapk128v20 953.09? 956.70? 1300.95? T:isapxv20 4619.06 4629.59 4632.42 T:elephant176v2 5711.82 5774.69 5782.30 T:elephant160v2